last executing test programs: 10m53.773640087s ago: executing program 32 (id=5975): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000003000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRESOCT=r4, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x548) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c, &(0x7f00000003c0)}}], 0x2, 0x20000800) pause() shutdown(r7, 0x1) 9m9.131292028s ago: executing program 3 (id=6718): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a030000000000000000000002"], 0x0, 0x3e, 0x0, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x401a, &(0x7f0000000000), 0x2, 0xbdd, &(0x7f0000000800)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x2, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) write$P9_RGETATTR(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800011702000000fcffff7f000a0000000000000c0002000100000004000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup2(r5, r5) sendto$rxrpc(r6, &(0x7f0000000140)="b8d9a7", 0x3, 0x4, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) 9m7.947900591s ago: executing program 3 (id=6724): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x0) (fail_nth: 8) 9m4.526421259s ago: executing program 3 (id=6746): creat(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x2c020400) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8) tkill(r1, 0x6) dup2(r2, r3) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x24, 0x0, r4}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x50) io_uring_enter(r6, 0x2219, 0xcf74, 0x51, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 9m4.351477121s ago: executing program 33 (id=6746): creat(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x2c020400) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8) tkill(r1, 0x6) dup2(r2, r3) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x24, 0x0, r4}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x50) io_uring_enter(r6, 0x2219, 0xcf74, 0x51, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 8m57.558944264s ago: executing program 34 (id=6796): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040e04ea0700000022bf000e80006c00758d41ad338b48272e1adad686a8859dc2955e819dece3929f985bb288e1984fc64f473ce65e25557351033c463b1b98763eac01e41e699dcc6d1fa9aa7475c3b11223b553c8ad4280b287f1246510dade2b3dce67aae313ee7b85af409422530329458b52a60b45c75273e1e035bddaa73dbd250b4bcd349248fb4b1649ad893283357fc79a2db8207d66ce047d6856f947a2e3471d3aa80e0a7f86da74afc7c15b6da5ee0f89ff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0x26c1, 0x9, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x2, 0x203}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 8m4.65939948s ago: executing program 35 (id=7230): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x8, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m34.874591828s ago: executing program 8 (id=7904): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 6m34.199789025s ago: executing program 8 (id=7911): unshare(0x2a020400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x34f, &(0x7f00000000c0)="$eJzs3U9oI3UUwPGXtGlnqm2CqKCgPt2LioRtjiLslmUrYmBFt7K6IMzaqYaMScmEaBZpsrCwFw9e/HdWQWShIB4EYVkPnqRl2bsn99aD9aTo4k8mM+NMtzOtRrd76PdzmD5+v/fm/ZJJh+YXaLaeef+tP4wxK05XilKQ4nEZFm4WpCJFiQ3libfXrz300iuvPr9Qr598UXVx4fR8TVXnHrly9t3Lj13t3vXy13PfTstG5bWt7dqNjfs3Htj68/SbDV8bvrbaXXXUik6myx/6zarqC57r+K42Wr7bCebPtdtd55zn6orXXl3tq9NavntmteP6vjqtvjbdvnbb2u301XnDabS0Wq3q7Iwg04XR0RK53PtkIT9t6cvfjJHt7g/GTA/FGBNV4bDQ6Gd4/W0ReS8/+cTsQS0LByR1U7dEvEu9pd6SiDcXHAMLK9IQT1w5KmW5KcE9wny6bka3iuD4Tm29fv3J779T1YqseYOoftBbmkjqzdOuzE+luib1i8/VT85raGd9SWbS/WtSlnvDmlBSX8usn5LHj6Tqq1KW669LWzzZvPLorzdOXfoorl+bVz1xqj6qL0pcb8tyvFxLvvgl++mr3N6rAwAAAAAAAADAeKqqqrZo3v59NUi4GESzFVmLPxMO5sMo2l8vpD8fiPfnJ6Lso5n785Ny/I48YgAAAAAADh+/fzGK+uebjue5Hd+Og2Akfg+fjKQCOxmZzMtJBffN7cwxxgySnHhFueV7BvZYVVFgjdn0fNOxo1UPRSQ757ML+53Hlnjk4cW9mx45NrEZN0ymSrdewX8dWOJ2SrdOPWiM2TkyJSLjtPj9THqkPNZSxdpdVfT7xoikkyf/fmXve8JRqiV75ViS7GLl5ZTiwM56ARQKYXVWi5/Hvl7pIGwwLSKlnN/BZ8/++NW+55na9fzsFm7rXf3/7j4AAAAADlLyR/8xGax80xuceeqDf1hqytH7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N+M8S/HNj/OmtIguOfzeORaFExLx89sXNiOvyYgz0+371EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk/goAAP//d0Obkw==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080200000030000005002100000000001400350064756d6d7930"], 0x3c}}, 0x4048004) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0xf, 0x8) 6m32.386243041s ago: executing program 8 (id=7914): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x5}, @TCA_CT_LABELS={0x14, 0x7, "2d71dc84871c83bdc06b16dfd848cdaf"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = socket(0x400000000010, 0x3, 0x0) setuid(0xee01) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x5f, 0x20000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x9, 0xfffffffd, 0x9}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 6m31.371352132s ago: executing program 8 (id=7920): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) close(r0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="cdf72da0dad4f550c7d87aa45fa622ac44ba39b5f6fb2e33247efcb88320115bb0a96e7a39fe0ba552ca765f7032508a51966e92b905a6ed160489be7b172f1ba5ad5abfc5ec5d3a9d9d31b8808f519d2022c616dd9a3176b75162f0bf5f99dc515885e79ca1c9cbd38509d86ecb743c508c6784290d5a04ea3619f41ac4e2e2dbbf47c327425c4e794f8fcdb59d8e3399ebc6b29030954280849b79638d2bf745316499c406f86cd4cb50b2c93ac564095e900d6900bb9696acf2f49cc4d1cf0c45a756f71113a05e40433ed4e1f46a8add706727f9cbefcd5bcb05", @ANYRESOCT=r0], 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000ac0)={0x2a, 0xffffffff, 0x8000}, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x40000048, 0x3a, '\\@', 0x3a, '.[', 0x3a, './file0'}, 0x2b) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc)=0x1, 0x85, 0x100002, 0x0, 0x0, 0xfffffffc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x0, 0x1}, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9800000002020101000000000000000003000005080005400000020008000940000000060a000b00512e39333100000013000b0063616c6c666f7277617264696e6700002c000a80180002801400018008000100ac1414bb08000200ac1414aa08000140000000010800014081000001180001800c0002800500010001000000060003400003000008000940000000090800054000000009"], 0x98}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 6m29.10795434s ago: executing program 8 (id=7928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x4) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r8, {0x8}, {0x3, 0x4}, {0xffff, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) 6m28.275918758s ago: executing program 8 (id=7932): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlinkprop={0x38, 0x6c, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x16090, 0x2a02}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}}, 0x20040004) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b02b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e52e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02d7147f667ec516545366cc56018bc1b563b100a2e4c51c06546a25a2005847c9fcede77362f54890e96075086110ee9cec7a20b139d819c94dc4c36c0b9ae55721f33f037cf92f2c4941a4bc36eb6c79859a1e120eb2c9ff5210b7cf35bf5d1d0b61a8fc3c5f55888eca4c844ed0436afaa9e9ca1a8fa1ffbbdf0fd03a6263fc21bcaaeae592a90fd64085944d4b5de552f49e2ff3a09de62f85d0c6020cdb7ef052a53afe", @ANYRESOCT=0x0], 0x3, 0x286, &(0x7f00000009c0)="$eJzs2k1rXFUYB/DnxqSdSUkn4hstiAddqJuhyVqhRSKIAUWNUAXprZnomOtMyB0CI2Ky0q0fQXAhiEt3gnTpJhs/gQt32WRZQRyZt5rE0iodMxJ+v8Xl5OT87z3nnuHyzGUOXvjy482Nsr6Rd2Imy2LmauzF7SwWYybG9uL5Z6//9OSb19959drqamXUu5xSuvjUj+9++t3TtzoX3v7+4g/nY3/xvYPD5V/3H9+/dPDHWx82y9QsU6vdSXm62W538ptFI603y816Sq8XjbxspGarbGwf+/9G0d7a6qa8tb4wv7XdKMuUt7pps9FNnXbqbHdT/kHebKV6vZ4W5oMHsfbt7V4vDntzN6LX61W/igu3YuGXqEX2cMoeuZo9diN7Yi+7dNjr1U5Gq9OZMZM13P9z8a/3nzNh9FBfeSOlSsz2Hwk7axHFF/1jRCWubUQzimjElajG74OPyciw/fIrqytX0sBifF7s7gzzuztrDw3Ofye/lGX9v++WXxrm0zh/PiL6x/mj+eWoxaN3zc+NlpKOX78Szz1zJF+PWvz8frSjiPXBPGJ3lFv5bCmll15bPZG/PBgHAHDW1Iel11wM67d+0XasfquPBvy9vhvmj9SHtfvUhyfqq9m4PDvdtRNRdj/ZzIuisd3/gjdo3OmZQGNcmk/shP9B47eTPdXxbakevT/3aIxfhUx2YuP3bP2emWN7Nu07prF3uhf9+twUVhrx0ak+iZiGvzb9vkMrpzIhAAAAAAAAAAAA/pEH/KngNy8OT3PPwdNeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/2ZwAAAP//1a6yjQ==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 6m28.261870919s ago: executing program 36 (id=7932): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlinkprop={0x38, 0x6c, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x16090, 0x2a02}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}}, 0x20040004) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b02b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e52e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02d7147f667ec516545366cc56018bc1b563b100a2e4c51c06546a25a2005847c9fcede77362f54890e96075086110ee9cec7a20b139d819c94dc4c36c0b9ae55721f33f037cf92f2c4941a4bc36eb6c79859a1e120eb2c9ff5210b7cf35bf5d1d0b61a8fc3c5f55888eca4c844ed0436afaa9e9ca1a8fa1ffbbdf0fd03a6263fc21bcaaeae592a90fd64085944d4b5de552f49e2ff3a09de62f85d0c6020cdb7ef052a53afe", @ANYRESOCT=0x0], 0x3, 0x286, &(0x7f00000009c0)="$eJzs2k1rXFUYB/DnxqSdSUkn4hstiAddqJuhyVqhRSKIAUWNUAXprZnomOtMyB0CI2Ky0q0fQXAhiEt3gnTpJhs/gQt32WRZQRyZt5rE0iodMxJ+v8Xl5OT87z3nnuHyzGUOXvjy482Nsr6Rd2Imy2LmauzF7SwWYybG9uL5Z6//9OSb19959drqamXUu5xSuvjUj+9++t3TtzoX3v7+4g/nY3/xvYPD5V/3H9+/dPDHWx82y9QsU6vdSXm62W538ptFI603y816Sq8XjbxspGarbGwf+/9G0d7a6qa8tb4wv7XdKMuUt7pps9FNnXbqbHdT/kHebKV6vZ4W5oMHsfbt7V4vDntzN6LX61W/igu3YuGXqEX2cMoeuZo9diN7Yi+7dNjr1U5Gq9OZMZM13P9z8a/3nzNh9FBfeSOlSsz2Hwk7axHFF/1jRCWubUQzimjElajG74OPyciw/fIrqytX0sBifF7s7gzzuztrDw3Ofye/lGX9v++WXxrm0zh/PiL6x/mj+eWoxaN3zc+NlpKOX78Szz1zJF+PWvz8frSjiPXBPGJ3lFv5bCmll15bPZG/PBgHAHDW1Iel11wM67d+0XasfquPBvy9vhvmj9SHtfvUhyfqq9m4PDvdtRNRdj/ZzIuisd3/gjdo3OmZQGNcmk/shP9B47eTPdXxbakevT/3aIxfhUx2YuP3bP2emWN7Nu07prF3uhf9+twUVhrx0ak+iZiGvzb9vkMrpzIhAAAAAAAAAAAA/pEH/KngNy8OT3PPwdNeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/2ZwAAAP//1a6yjQ==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 6m25.004058756s ago: executing program 7 (id=7956): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000000000000204000400000000008e000000000000002000000000000000"], 0x24, 0x0) 6m24.796022461s ago: executing program 7 (id=7947): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x5}, @TCA_CT_LABELS={0x14, 0x7, "2d71dc84871c83bdc06b16dfd848cdaf"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = socket(0x400000000010, 0x3, 0x0) setuid(0xee01) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x5f, 0x20000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6, @ANYRES32=r1, @ANYRES64, @ANYRES32=0x0], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x9, 0xfffffffd, 0x9}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 6m23.807471549s ago: executing program 7 (id=7955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (fail_nth: 3) 6m23.622593832s ago: executing program 7 (id=7957): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) close(r0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="cdf72da0dad4f550c7d87aa45fa622ac44ba39b5f6fb2e33247efcb88320115bb0a96e7a39fe0ba552ca765f7032508a51966e92b905a6ed160489be7b172f1ba5ad5abfc5ec5d3a9d9d31b8808f519d2022c616dd9a3176b75162f0bf5f99dc515885e79ca1c9cbd38509d86ecb743c508c6784290d5a04ea3619f41ac4e2e2dbbf47c327425c4e794f8fcdb59d8e3399ebc6b29030954280849b79638d2bf745316499c406f86cd4cb50b2c93ac564095e900d6900bb9696acf2f49cc4d1cf0c45a756f71113a05e40433ed4e1f46a8add706727f9cbefcd5bcb05", @ANYRESOCT=r0], 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000ac0)={0x2a, 0xffffffff, 0x8000}, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x40000048, 0x3a, '\\@', 0x3a, '.[', 0x3a, './file0'}, 0x2b) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc)=0x1, 0x85, 0x100002, 0x0, 0x0, 0xfffffffc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x0, 0x1}, 0xc) 6m23.21408991s ago: executing program 7 (id=7958): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000000000000204000400000000008e000000000000002000000000000000"], 0x24, 0x0) 6m22.820069848s ago: executing program 7 (id=7961): setuid(0xee01) 6m22.753583023s ago: executing program 37 (id=7961): setuid(0xee01) 6m20.150925184s ago: executing program 9 (id=7974): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x9329, 0x8001, 0x100008}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)={0x490102, 0x104, 0x13}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(0x0, &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) sendfile(r2, r2, 0x0, 0xe3aa6ea) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000000)={0x6, 0x1, 0xff7, 0xb, 0x8, 0x17, 0x10, "ff03cae9ffed0000040500", "39e80000460062ff010000ec00"}) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7GtwjAUBdD79RMrER3KDjS01AyB6JkEsQJrULEgAjlGsAFKcU7haz+9WzgswrXF5p5dztP6M/9/5+P7KvuuXoc8k6zSt4UuY42/9PM8GepxmJLT3CzbJJcxdb+0Ssnx9qv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCSvQIAAP//q50IVw==") write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000400)=0x80000000, 0x4) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) 6m18.253939746s ago: executing program 9 (id=7983): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x88d9d501}}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x10, 0x24048048, &(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0x4}, 0x1c) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x5, 0xfe, 0x0, 0x4, 0xc080, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000ff, 0x415}, 0x12122, 0x10000, 0xa, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) mmap(&(0x7f0000e0f000/0x2000)=nil, 0x2000, 0x300000b, 0x31, 0xffffffffffffffff, 0x7ba11000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) unshare(0x600) socket$caif_stream(0x25, 0x1, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="40d8e40400000021725c1e68f800", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500030002000000050003000100000005000300050000000800020002000000"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 6m16.500924688s ago: executing program 9 (id=7994): unshare(0x2a020400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x34f, &(0x7f00000000c0)="$eJzs3U9oI3UUwPGXtGlnqm2CqKCgPt2LioRtjiLslmUrYmBFt7K6IMzaqYaMScmEaBZpsrCwFw9e/HdWQWShIB4EYVkPnqRl2bsn99aD9aTo4k8mM+NMtzOtRrd76PdzmD5+v/fm/ZJJh+YXaLaeef+tP4wxK05XilKQ4nEZFm4WpCJFiQ3libfXrz300iuvPr9Qr598UXVx4fR8TVXnHrly9t3Lj13t3vXy13PfTstG5bWt7dqNjfs3Htj68/SbDV8bvrbaXXXUik6myx/6zarqC57r+K42Wr7bCebPtdtd55zn6orXXl3tq9NavntmteP6vjqtvjbdvnbb2u301XnDabS0Wq3q7Iwg04XR0RK53PtkIT9t6cvfjJHt7g/GTA/FGBNV4bDQ6Gd4/W0ReS8/+cTsQS0LByR1U7dEvEu9pd6SiDcXHAMLK9IQT1w5KmW5KcE9wny6bka3iuD4Tm29fv3J779T1YqseYOoftBbmkjqzdOuzE+luib1i8/VT85raGd9SWbS/WtSlnvDmlBSX8usn5LHj6Tqq1KW669LWzzZvPLorzdOXfoorl+bVz1xqj6qL0pcb8tyvFxLvvgl++mr3N6rAwAAAAAAAADAeKqqqrZo3v59NUi4GESzFVmLPxMO5sMo2l8vpD8fiPfnJ6Lso5n785Ny/I48YgAAAAAADh+/fzGK+uebjue5Hd+Og2Akfg+fjKQCOxmZzMtJBffN7cwxxgySnHhFueV7BvZYVVFgjdn0fNOxo1UPRSQ757ML+53Hlnjk4cW9mx45NrEZN0ymSrdewX8dWOJ2SrdOPWiM2TkyJSLjtPj9THqkPNZSxdpdVfT7xoikkyf/fmXve8JRqiV75ViS7GLl5ZTiwM56ARQKYXVWi5/Hvl7pIGwwLSKlnN/BZ8/++NW+55na9fzsFm7rXf3/7j4AAAAADlLyR/8xGax80xuceeqDf1hqytH7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N+M8S/HNj/OmtIguOfzeORaFExLx89sXNiOvyYgz0+371EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk/goAAP//d0Obkw==") socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xf, 0x8) 6m15.583999902s ago: executing program 9 (id=7997): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) close(r0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="cdf72da0dad4f550c7d87aa45fa622ac44ba39b5f6fb2e33247efcb88320115bb0a96e7a39fe0ba552ca765f7032508a51966e92b905a6ed160489be7b172f1ba5ad5abfc5ec5d3a9d9d31b8808f519d2022c616dd9a3176b75162f0bf5f99dc515885e79ca1c9cbd38509d86ecb743c508c6784290d5a04ea3619f41ac4e2e2dbbf47c327425c4e794f8fcdb59d8e3399ebc6b29030954280849b79638d2bf745316499c406f86cd4cb50b2c93ac564095e900d6900bb9696acf2f49cc4d1cf0c45a756f71113a05e40433ed4e1f46a8add706727f9cbefcd5bcb05", @ANYRESOCT=r0], 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000ac0)={0x2a, 0xffffffff, 0x8000}, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x40000048, 0x3a, '\\@', 0x3a, '.[', 0x3a, './file0'}, 0x2b) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc)=0x1, 0x85, 0x100002, 0x0, 0x0, 0xfffffffc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x0, 0x1}, 0xc) 6m14.772639848s ago: executing program 9 (id=8005): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fb, &(0x7f00000000c0)={'bond0\x00', @random="0600002000"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x3fffff) (async) sendfile(r2, r3, 0x0, 0x3fffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000107010200000000000000000700000804000780ba35b256f9c57caafad03742ef45d8548423ddfb8aded7e4569f86fe1348217c0b16214e6fbd60e51aa7f94f85438d47f73a3da23fe6156e1c7243e8d9d26fd6396397d91607f7ea3ef43c4e"], 0x18}, 0x1, 0x0, 0x0, 0x4004001}, 0x94) (async) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000107010200000000000000000700000804000780ba35b256f9c57caafad03742ef45d8548423ddfb8aded7e4569f86fe1348217c0b16214e6fbd60e51aa7f94f85438d47f73a3da23fe6156e1c7243e8d9d26fd6396397d91607f7ea3ef43c4e"], 0x18}, 0x1, 0x0, 0x0, 0x4004001}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001480)={{}, "be252e8f7fb8f27bd8d4b9c268b57e3bb0359b06780dbea1fac90157f4c3669373b2cc4af0a4b3bd86e4b2c7ae685d0b981818984d7c63b2626896bdecd10b93560b30eb2240e5be7e6d49942f11198af7f03c29217289d0e6a8dace900d51352fde7641f67918e84a0b58d2ff3b3f7765270cd470280db7ca46abc5b02ff30483c0d2fd5d6fef5b9221b854fa9383601dc9176a39bd9c644f9820b1b080de199bfdde17ba51451618b9fbfb1b17522638a8c4e24259eb6d3490ff6b84b7493792ee5a76e7e66d3c30718e2c1e10922a3dc0ab7c999930e45bc8ffd047d492320d1e5f6935f249a166742b15472336f58dc0582cecafdec2accdd36204111e4bb4bcd62c51438b8e49df8d60f250c29222f77174bf80f7fcfe21e4e5eefac5499f3d6e8b63a5b3e22ce6666608d78452f35d1c0bc6bacf93a670c682f41dead1b2d61dbabd448a276db90275d0f4bc64472c805d9165a3d34637fdfcee52389d8b60e9c8510450abc258eb6548b65471b5b45b9a5890cd44e4e80158a0039b328fa89d7509620390ff3a7b6d98b05e7719c8521d01e794f6194f663d01f7dfb0c0322336c226f03531d876ac6c095dc93c90a717c6dff0204d792c5512436060b0388ba113e38c650ec57812eeff2019c5966131920e30c8a52c37de4fa8cb9fb2f6deaf3d13e82b83bf8b47124c125946c023c34ee3a436fca0265c879de2ad0962b18064b8caddeef68db95751dd89e0d8fd08ac9eae926ee33c10dc0bfb3e9bb572a24be8ecb865115222ce0e36156b3fe8053a07d29a224ce0659e2c1a5a3c08ea869ce6c3ffd0503664d8c3585f261fd82ce4239adc4aac89d5046d167b8976bb001583e17ba800f966b16c8ee9d3276662d50fa64a74c3afe028af49c72481fe4c3f0c4e542896afb0c1fd0f344ba741eaf26c1565f896f7673ea443b58249b3745de7a6126463e4964e1a82d7a0fc5c45a94cf7d7dd0ca606babe3e8ca7b3d29e90dfc73b2ca64c2b9052bbc588bd0dfbc9219b57acba8a2942e104a3da9893bfa0816ac3e95e813271d209e969c960186cda7837c3a3703cc7f065ae5624d8dd1594fabceff89b4174d9c41a55cd45f3d95025fe6dee611270a08870773b4ee5ef1adade04fc0f5b206f3538ff47310b3c7bcd478064e19af761404433caa81ef883a8380f4d612788d422a71a9435d6357aa870cda3b33a76f60e0d1bfc4b2a6f6fb1e4bbd70d7b26c6003972faea7a800c80e09d8ce5e86077b62d2642b3c90888f1d231db2ab8b7ad013d25408dc5060f9ff4c5ef19a3cdabcfc20a6961fe2f7c94821efb0bc85cfb088be102a744da01bbed496260d2e987b80e378ac4ad4afaf7b92fc971efbc0e30f441034d2b2e5e23ab232effed2f2c854a6d2633165dccb19b91272723d9a0591d6c2cb594a635788413509b822a5183c91c8d00233e5d0fa9103950dd4525baa23ffe3c9ebd05b547361b4eae85d43a7453e06e59d766b534c3e500501190ba4e06d96ce1f41fe2800b3bda5e03ec0fe72fddf66f1e24a750070cacf3e70aba8704568ef7019cb9a5d835aae9c56b822b0acb159a8e005796665a5c0b8c537fefe51905f8c81e011fc7f8e7e98721049ceee49d36636dc5e5f1f0aeb4f6978c216c0e48edd1da23131e1140c8e4d2073e450fc729acca0e7044fb54f166260af6e1e3954622ca58de2ea7d10f36727691019d02bcc8bc7d63ed42c8113f77708c369eed9abcf0446c7cdfa99a9f06d65575404f8c377cb24b42d2dec0eb3f61d0f2ae1025837232a931898f66c71d56db671fa1137b4d47dce7f7e6e99dad2923c578d2a96f3634edb5b6400a9c84b16155119dcc7e8441e1ee8347df014099c33260dc387a72bd62ee4e0f4231153494e699980d635fe3ccde8c6e4c310cd578b190f56249975c6af4774874e44db811abdd34a48bfc59a99e74771ec28986d7f84fbfefeab3fec485c76dcdac15c3f72a34fff413a3fd061cd6530859bd5a03e31fefdab230b4454ad38ba61537dbbfec152c40717a1232618039c99d067a22d27be5fda3543adb14f836cae7753326f22d0d05b5d3ae14b53b23f7d536abe88cec1783c9499d1aefd32a2889f5a596cee968f623aec37647a7976148a043fb960305569bd770773b5b75ab6bba016b3954ad40a217f450a53c51eb62cfa837dd0e647c14363a913f47c9cf7056bb61ae8a251da367ef64b726a6fd19cc78f365a23ccb2aa130640fed70770b868b07e9657739052b0d4f8a1671e9e38a33a1c09b2e3e43dce3f61c7a0f989eb5d5f105b1b334c059406ca444558d999eeff710e77cf1aa414490c5ec23fcf2fcfed9b867a89655a0e8c2aa85177e5e6663c9d09716f414f6230842f63557f468a489e0d98e0efe5981bb51f6c672b0d0bee0167a0d2edd2b20eb680b69ff341f3284eee71574fdfbeba0367103c31d67641940f826d523b7f3750d9d25ab19dad29acd29227af08e2e8e0a9e8721bf151611a417d73ad046c1e288876f7c344fde890a5d2cb220aa47b5738f4cdcd176b0e24ecf9acf0afaf523f8764c875ed860aad5e0cb2d38919a27d307590847e1e2f2ff9b25e10ee8d46c4361c14503ef22ee33b42f7448dded7237eead5bb66c577eb5f98afaac37d53fd9197d390639669ac062aea98c8ab9cbee0264ad45c7d99b69d85b236af447f523e44ff1114b004409adb4fa76eb2232140ccc243d8bbf303994a023091303d610bac8499493fa496368a57954f7c20295b0436763c9e05619d63cd8a55bc47533996baac068e169bd4a1f992a37d4bf60e0292c88bbf72ad3add60028fbbf7068a33eafd8e15f8e4d3fed397920bd0f4c61a67e6874ddb6babd04d5aba5d4796295449d589ad40227d15848b4e3792362c2510d83ae72b105f05ad0065a865badaa593451059ca30f5cd44fa3b80fab5e1c6e22be09c1ec96ec649576d5ab89fafe2fe2fdec77b1dc6791488fd15f1b13dbc309e647ebb8f1390acb4bb95528cead9a1916b7d890d263392d11a0887a7b2a05df08af7144a925dec3e0c61bf813b7d2d403012887258ef5ff8a5a59ff1cc9e268be8a3e65e74678de9ba64f32208484d7abc892a896b0cea64e17628ded82a3abd4c734bbe491a7e85637eede7da549e11d39bbe608cd0bfc32e6c768ba89270449af60f151393cc9da6fc799ac83dc1b288794b0927c442ca010be6af680229c163bab2f266434012f9d29ff0682b89ae60dfebe9049cc032e2c6125702808f56d167beb7d35003573d5cfe22eccc1852db53260991a6457cbf2fabcccb16d779cb61edc9b3531f806962d1d4984c788fc91a48f16b9675423a564b6288220eff714fe1cc8b3a1628f51b4e8a38358f759c5d0f5161eeb2a76936ec8b81b896c8fc69a27606d33442807c481f1c8b263b869594624745216547aeeefff6cc019b6e6f327224a6f04e85fc79d60de0fe558e178711917bac1bc89198621cde03b44024748a221aa7ade23563ba76bbbaae53b62f51d933b33730f03dce1e1528fa8f6d424bf64f176f179dbea4d097b395049f46a9e0634b2b4fda1dba678a71aa7e8b8ce45339f4d3fa4e7cf24bec9b62f10840e98cbde88f9f19fbeaf49e91c64c7631895cc21715ef2a294bfdbd3c85d4f8038359cce2a6d48942fc257f84a4024e0060e6f1b8d538b6362600b614559fb456c1c896faa18c4a6797eef0230fcda485e4c1a8e13faf71ec64b6d207889cc1725ee20fc5646097417aaf490dba5cb76d5e670eef284fcef1c73124fdb712b6aaa8334bdd7fc37b3229e60ea716d7956f033890ac9ec0004e9ee2e4fbe052d97cf8fb493ffd5477ada7823e7f52d439969ab24e3067a11b1e733bbe7f7f21c9319acdc4ebc1b679ed266ac4ac45a577f0b1afb571bfa8e071694b4b65691d17dfab2b5637cd04a78f8b42f723ac38eaedcb017e5cf580430c1602a5052e33a914e7f13d9ee64a231d551c76a9e7d63cc69a03fb434c0e7d01c64f92b06551fae6ce5a0c95358255b5c1ee6e01c78be41d2727166a99a35e141b29f7321d1d5d57383529bbc9d12f559e282a77780042b6bd0508a9e4742c3acfc368ae83dfb99d8a7181dbd405b1d8fef54628d8f04b8955bee56702b15eba3e36c7abe91d82c0ff04bc8bae47fb9bccee089eb918f0806e0b52dc46e2954fca665e8e60311086da99bdd2d6e50b62d6c0e1d47d2034a60833116225189301e5ed01a40bbfe39b088964f5999e9da6a02bd2777be8d44f387e02076c3dfe8909a190f022eb39ea4806d12ab96e87e068254ce6c3c84f99f4522b94cdb98e7d8d6c415ca1b3c00c8f46bd8a158718a518f416594552a83346f2a8db712bbded8400d7250d9df59eafddb732743c3c4b2feb788d4fc2a436dd0d717bbcd3310a965992030666d28dfd8a6231aa63b1087b95ab91b0a89a31aa623a0db6085e11918ac38d7880513c337aed98490e70073f6e552efb0a1132ea5c88a7cafe2f0dc6ac31cc0dd0f3ded312a18c4b8c044adfbdcb6bbe272df3a7f0cd81c4547e119c72f26e3e7d6fb248f4f5f458814a3d2eca996e5c14b6f558838aed8258d17029a8c87a713ea2938817f885c2bc5a1da13efacc00c31d31f207689d35688064d7c519898a22837c72844b71dad760286f0848b7c7c84a4d12d8a36feac9ad26d35d212d39ad4548954d8228f94557360fcbeb9430eb5a6abedd87153b20a58be0c773858b1e8432f11bde6a91eb08d45858ad1cca859eb73e654f76db54ad95866b40d19a57a25f6223453e706452cc5d9d8d3e4be154ad9f7bd767c1ed6fd71b209ad9c559bd8232d7f11057d915a32e1824bb63b546eb302ebe3996c6004656c21eca80f5e0ef9cf6e1ce2a10b3f0ec34be0947f1ee2b05f98d3b3f99901f74c6ffd8890b7e5628c1bc8762e3ba1c49c6fa6a6e71242cb751aeda7874cc1a0097791d3e05a23166da6f5ef33431c0756fd1a16accb7f8426d8efb472166984478dad3e993841c46be9316d530f45d42d063d2a27ab2f177c550826470273a9ecd96b8e8d85f24e6d0bb8a44f63c73e7c5319e5d7e434d8ba6afa7319c474d13117fe754147652e423c320b3c8c745b7c34eef6e6f5dccb103133aa880741275e958d008046fd6be1f8008d5634515cad3420499e9f196a18dc802e80ee1e0389efa3ee20bfdd3e44d05fcfeda9288db3189e02c6d8cf474dbb3723c05b6a9a4053d32596943f6c8e7512275d3013021cf5f6e9d353cbded0e62ae916b2b5a5a7e37b4602a7feba5683b27aee0a21ba51068a071234d18b852cf728fb0f54b971d5472fabfad5797a4e9e7e8f88bfb7865c664275f488c8dff822a5d1231f87ca73bef726eab9b1ae3f9ca774b7c46460fd4990b07972c1d0440677b534280c0353e9250023cfbe67dc9b913aead5605282be2cdafdda7a861ce3de32676662cb03fb2dcf011cb55742c72639ba9f87c1ded80ba7146786a5cb10889442d9f1ad14cc911f1dbd040fc74ee1218a8d31acea110a8524182bf617f7ac2828a1862ec008ba1ef3286e423b6b1484f34e1bc14332b1a3c76bcb17b52311d946683404eb714fea0a08e005346455d44da0f025111f7b7e810825c085e3c87236897ab7290f9b64f849ee1223ce302f43778e7d7ac83a5b4c80f578ccffd151ec7bd4c4ffa2e0a3ea58ff0b973174ba5542363cbc8b82831aadd8645ee80ade94ed2cd9720575a083ed5737fbdac4b11131e3d2ab083d16089a184982f2954176af11"}) syz_clone3(&(0x7f00000006c0)={0x10000, &(0x7f0000000540), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x17}, &(0x7f0000000400)=""/244, 0xf4, &(0x7f00000005c0)=""/144, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, {r3}}, 0x58) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x3ff, r10}) (async) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x3ff, r10}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(r9, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f00000051c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005180)={&(0x7f0000005200)=ANY=[@ANYBLOB="20100000", @ANYRES16=r7, @ANYBLOB="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"], 0x1020}, 0x1, 0x0, 0x0, 0x800}, 0x20004050) (async) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f00000051c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005180)={&(0x7f0000005200)=ANY=[@ANYBLOB="20100000", @ANYRES16=r7, @ANYBLOB="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"], 0x1020}, 0x1, 0x0, 0x0, 0x800}, 0x20004050) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x408000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, 0x0) readv(r11, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) sendto(r3, &(0x7f0000000080)="5c751b0af690137655431b6bbce779853bb6d4407b08874d9b524412da62cbf52114df588e04bc40f26bcc", 0x2b, 0x1, &(0x7f0000000100)=@nfc_llcp={0x27, r8, 0xffffffffffffffff, 0x3, 0x8, 0x6, "3ec714b30564e5adb1ed5b3ab1307155be7613d5f02838cc1afe2c49bfe6f44dcc6a95244132804c6b07df9a5d827b18aa7b08927a31d6296bc06912313ee9", 0x3d}, 0x80) 6m13.031968s ago: executing program 9 (id=8014): unshare(0x2a020400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x34f, &(0x7f00000000c0)="$eJzs3U9oI3UUwPGXtGlnqm2CqKCgPt2LioRtjiLslmUrYmBFt7K6IMzaqYaMScmEaBZpsrCwFw9e/HdWQWShIB4EYVkPnqRl2bsn99aD9aTo4k8mM+NMtzOtRrd76PdzmD5+v/fm/ZJJh+YXaLaeef+tP4wxK05XilKQ4nEZFm4WpCJFiQ3libfXrz300iuvPr9Qr598UXVx4fR8TVXnHrly9t3Lj13t3vXy13PfTstG5bWt7dqNjfs3Htj68/SbDV8bvrbaXXXUik6myx/6zarqC57r+K42Wr7bCebPtdtd55zn6orXXl3tq9NavntmteP6vjqtvjbdvnbb2u301XnDabS0Wq3q7Iwg04XR0RK53PtkIT9t6cvfjJHt7g/GTA/FGBNV4bDQ6Gd4/W0ReS8/+cTsQS0LByR1U7dEvEu9pd6SiDcXHAMLK9IQT1w5KmW5KcE9wny6bka3iuD4Tm29fv3J779T1YqseYOoftBbmkjqzdOuzE+luib1i8/VT85raGd9SWbS/WtSlnvDmlBSX8usn5LHj6Tqq1KW669LWzzZvPLorzdOXfoorl+bVz1xqj6qL0pcb8tyvFxLvvgl++mr3N6rAwAAAAAAAADAeKqqqrZo3v59NUi4GESzFVmLPxMO5sMo2l8vpD8fiPfnJ6Lso5n785Ny/I48YgAAAAAADh+/fzGK+uebjue5Hd+Og2Akfg+fjKQCOxmZzMtJBffN7cwxxgySnHhFueV7BvZYVVFgjdn0fNOxo1UPRSQ757ML+53Hlnjk4cW9mx45NrEZN0ymSrdewX8dWOJ2SrdOPWiM2TkyJSLjtPj9THqkPNZSxdpdVfT7xoikkyf/fmXve8JRqiV75ViS7GLl5ZTiwM56ARQKYXVWi5/Hvl7pIGwwLSKlnN/BZ8/++NW+55na9fzsFm7rXf3/7j4AAAAADlLyR/8xGax80xuceeqDf1hqytH7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N+M8S/HNj/OmtIguOfzeORaFExLx89sXNiOvyYgz0+371EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk/goAAP//d0Obkw==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080200000030000005002100000000001400350064756d6d7930"], 0x3c}}, 0x4048004) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0xf, 0x8) 6m13.02905664s ago: executing program 38 (id=8014): unshare(0x2a020400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x34f, &(0x7f00000000c0)="$eJzs3U9oI3UUwPGXtGlnqm2CqKCgPt2LioRtjiLslmUrYmBFt7K6IMzaqYaMScmEaBZpsrCwFw9e/HdWQWShIB4EYVkPnqRl2bsn99aD9aTo4k8mM+NMtzOtRrd76PdzmD5+v/fm/ZJJh+YXaLaeef+tP4wxK05XilKQ4nEZFm4WpCJFiQ3libfXrz300iuvPr9Qr598UXVx4fR8TVXnHrly9t3Lj13t3vXy13PfTstG5bWt7dqNjfs3Htj68/SbDV8bvrbaXXXUik6myx/6zarqC57r+K42Wr7bCebPtdtd55zn6orXXl3tq9NavntmteP6vjqtvjbdvnbb2u301XnDabS0Wq3q7Iwg04XR0RK53PtkIT9t6cvfjJHt7g/GTA/FGBNV4bDQ6Gd4/W0ReS8/+cTsQS0LByR1U7dEvEu9pd6SiDcXHAMLK9IQT1w5KmW5KcE9wny6bka3iuD4Tm29fv3J779T1YqseYOoftBbmkjqzdOuzE+luib1i8/VT85raGd9SWbS/WtSlnvDmlBSX8usn5LHj6Tqq1KW669LWzzZvPLorzdOXfoorl+bVz1xqj6qL0pcb8tyvFxLvvgl++mr3N6rAwAAAAAAAADAeKqqqrZo3v59NUi4GESzFVmLPxMO5sMo2l8vpD8fiPfnJ6Lso5n785Ny/I48YgAAAAAADh+/fzGK+uebjue5Hd+Og2Akfg+fjKQCOxmZzMtJBffN7cwxxgySnHhFueV7BvZYVVFgjdn0fNOxo1UPRSQ757ML+53Hlnjk4cW9mx45NrEZN0ymSrdewX8dWOJ2SrdOPWiM2TkyJSLjtPj9THqkPNZSxdpdVfT7xoikkyf/fmXve8JRqiV75ViS7GLl5ZTiwM56ARQKYXVWi5/Hvl7pIGwwLSKlnN/BZ8/++NW+55na9fzsFm7rXf3/7j4AAAAADlLyR/8xGax80xuceeqDf1hqytH7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8N+M8S/HNj/OmtIguOfzeORaFExLx89sXNiOvyYgz0+371EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk/goAAP//d0Obkw==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080200000030000005002100000000001400350064756d6d7930"], 0x3c}}, 0x4048004) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0xf, 0x8) 6m4.021088818s ago: executing program 3 (id=8016): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) close(r0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="cdf72da0dad4f550c7d87aa45fa622ac44ba39b5f6fb2e33247efcb88320115bb0a96e7a39fe0ba552ca765f7032508a51966e92b905a6ed160489be7b172f1ba5ad5abfc5ec5d3a9d9d31b8808f519d2022c616dd9a3176b75162f0bf5f99dc515885e79ca1c9cbd38509d86ecb743c508c6784290d5a04ea3619f41ac4e2e2dbbf47c327425c4e794f8fcdb59d8e3399ebc6b29030954280849b79638d2bf745316499c406f86cd4cb50b2c93ac564095e900d6900bb9696acf2f49cc4d1cf0c45a756f71113a05e40433ed4e1f46a8add706727f9cbefcd5bcb05", @ANYRESOCT=r0], 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000ac0)={0x2a, 0xffffffff, 0x8000}, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x40000048, 0x3a, '\\@', 0x3a, '.[', 0x3a, './file0'}, 0x2b) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc)=0x1, 0x85, 0x100002, 0x0, 0x0, 0xfffffffc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x0, 0x1}, 0xc) 6m2.973282491s ago: executing program 3 (id=8061): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x9329, 0x8001, 0x100008}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)={0x490102, 0x104, 0x13}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(0x0, &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) sendfile(r2, r2, 0x0, 0xe3aa6ea) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000000)={0x6, 0x1, 0xff7, 0xb, 0x8, 0x17, 0x10, "ff03cae9ffed0000040500", "39e80000460062ff010000ec00"}) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7GtwjAUBdD79RMrER3KDjS01AyB6JkEsQJrULEgAjlGsAFKcU7haz+9WzgswrXF5p5dztP6M/9/5+P7KvuuXoc8k6zSt4UuY42/9PM8GepxmJLT3CzbJJcxdb+0Ssnx9qv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCSvQIAAP//q50IVw==") write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000400)=0x80000000, 0x4) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) 6m0.660062222s ago: executing program 3 (id=8071): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20040004) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x286, &(0x7f00000009c0)="$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") syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 6m0.594262536s ago: executing program 39 (id=8071): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20040004) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x286, &(0x7f00000009c0)="$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") syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 46.084105459s ago: executing program 1 (id=9511): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xffffffff, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 46.056121921s ago: executing program 1 (id=9513): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) futex_waitv(&(0x7f0000001dc0)=[{0x1, 0x0, 0x2}, {0xf0, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x3c, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0xd, 0x0, 0x82}, {0x7f5, 0x0, 0x82}, {0x79, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x10000, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0xfb3e, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x10, 0x0, 0x2}, {0x7ff, 0x0, 0x104}, {0x81, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x78f, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x8, 0x0, 0x433b06531bb4e3cd}, {0x1c000000, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0xed45, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}, {0x81, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x3ff, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0xfffffffffffffffc, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x94d7, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x7f, 0x0, 0x2}, {0x4, 0x0, 0x82}], 0x34, 0x0, &(0x7f0000002900)={0x77359400}, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x13, 0x4, 0x2, 0x2a, 0x4c, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x56, [@rand_addr=0x64010101, @loopback, @empty, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}]}}}}}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r7, 0x100}], 0x1, &(0x7f0000000200), 0x0, 0x0) unshare(0x6a040000) 45.046592952s ago: executing program 1 (id=9518): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x7c1302, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf35, 0x2}, 0x1224, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}, {&(0x7f0000000180)="433874f6e60b72394e3359a58fecc2c47fec3aeca942f2383f3dab51f6887c86e0c741fb1824416ce7c64c58083fc5656d7dc4909f76ca75b1f250d7b1c46a12172c31433b13ee6a4bf4517ea4a623dd7048367a1c0663ceadb87823fb332ec6862ee0b3bab61e", 0x67}, {&(0x7f0000000480)="d3004633060d2f02dfc243e48db9cb20fe090aec44c7aecee68813070c178c616c1a976b5de9112f45cb877da6cc0455d4038ba5d91f073cfe6222fd1b5c9e8bd0cc1b3ccf2761283311fc38f93b8b3b7cba3c1154e0f6be6a37125ecffac42416b85176c7f20098da9035fb88881a02bc9ce5e021adca691ebf809358a28774b5b7ce1f4d74aee2123cd4234f364787474f015965af01ced8836f580b94", 0x9e}, {&(0x7f0000000540)="c9f5cf35b6e15a361297f19f6d7a6605ff6b83284b9f3d4c12d5353e1687e106a6d862cf083c7b1b7f30baa41c2f566801f14d5d35b1f38310b869fbb7a2d69a7b538b482f3b61a7c07e31b417f9f89b3e020407381ba90df26eb878fa5b204ed76c6ffd3fa00bf3e35b55c96c999531559b52", 0x73}], 0x4}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f000000000000", 0x29}], 0x1}, 0x20000000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendfile(r1, r0, 0x0, 0x7ffff000) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x5, 0x70bd2b, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8, 0x1b, 0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}, @IFLA_PORT_SELF={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) syz_io_uring_setup(0x3307, &(0x7f0000000000)={0x0, 0xaf87, 0x2000, 0x3, 0x2f9, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 44.668078768s ago: executing program 1 (id=9523): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xffffffff, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 44.619076372s ago: executing program 1 (id=9527): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x8001ff, 0x0, 0x5, 0x8, 0x23, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x742f, 0x77ae, 0x0, 0x0, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x20010, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r8) ptrace(0x11, r8) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r9) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x20, r10, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x84098}, 0x840) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r10, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffe5a, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20004110}, 0x80c0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x3c, r10, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x80d0) setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000000140)="cb2eb0791fbbfc0f4a17e3e4bf6052f2c825fe0aa803ed6a8c86aaa6d83fbedcc92f9b9c74242990e2d56dc5029de283c71809edd019d953f97748d49d20ac1c08d13948495a635cc58067584898223508ffc2f2644d91b8a6d94731bb99eada85cd3f9a29b7a9961851ce96839a9fde35df533e1cf161e3d5e7a3eb68e65f51a21e53c721f338e2c8ea541c1ed647b787dc7b108c6c8354677320c3705539942cbc9615e1d60bf582fcb71d9c2cb8171a3e744390722fdb4ea7d4e5c3c9f512636b71ad70a1169f07033a43d62c8e5774cd756aca002f94", 0xd8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2046) 43.555638346s ago: executing program 1 (id=9534): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x3) socket$netlink(0x10, 0x3, 0x400000000000004) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r12, @ANYRESDEC, @ANYRES64=r11], 0x38}}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r13, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r13, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r13, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) setsockopt$inet6_int(r13, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) 27.471690616s ago: executing program 40 (id=9534): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0xffffffffffffffff, 0x80, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x3) socket$netlink(0x10, 0x3, 0x400000000000004) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r12, @ANYRESDEC, @ANYRES64=r11], 0x38}}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r13, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r13, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r13, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) setsockopt$inet6_int(r13, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) 9.806947767s ago: executing program 6 (id=9773): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x3, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @broadcast}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffbfffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast2}}}}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000140)=""/248) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000400), 0xb}, 0xc0c8, 0x0, 0x0, 0x5, 0x9, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xfff2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 2.985366652s ago: executing program 6 (id=9780): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x80000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) uname(0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="0300000000e8fe50050040200000000000000000000000000040"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_clone3(&(0x7f0000002a80)={0x16180200, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580), {0x6}, &(0x7f0000001940)=""/4096, 0x1000, &(0x7f0000002940)=""/250, &(0x7f0000002a40)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r2}}, 0x58) syz_pidfd_open(r6, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x106200, 0x1000, 0x20da, 0x0, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="243c768eed4f57b067fcba7439c03b0e2472c0f20ac1a301018be490d80fcb42db00000ae05899bdb6e336387107000000000000004fbcb270af43085ff7049872038dad6774b82b01a42ca0a8e3f3073f86b0df7a98696b2e31f68e14e4185f013955d3e6f4fb59939620c7c935a8bc3de833f84bacd1bd198d28b4912398c2288f4327", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount(&(0x7f0000000680)=@md0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000700)='securityfs\x00', 0x200000, &(0x7f0000000740)='noquota') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000ffffffff00000000fbffffff1811000011891c5f784aae8b91ec8e9c484199d0551c6c2abdbddf0b9810a7b35e070a98abbdcd481cf5d8b5a4", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70200000000000085000000d3000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.953685254s ago: executing program 6 (id=9835): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000023c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000000000800074000000000100005800b00016e64"], 0xa4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.672411613s ago: executing program 6 (id=9837): r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '.[[[-%N\'.(\x00'}, &(0x7f0000000080)=""/40, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001000000800000004bc5d63169b9053cf9cbf177", @ANYRES32=0x0, @ANYBLOB="a528ce82"], 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x6dd, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x11, 0x3, 0x10001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00"/1284], 0x590) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) ioperm(0x0, 0x7, 0x80006) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") accept4$inet6(r7, &(0x7f0000000700)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000740)=0x1c, 0x80800) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$nl_netfilter(0x10, 0x3, 0xc) 1.58342716s ago: executing program 5 (id=9841): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x80dbc, 0xf, 0x8, 0xffffffff, 0x7, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x790) msgsnd(r2, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) 1.58105842s ago: executing program 4 (id=9842): unshare(0x200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r1, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40), 0x700}, 0x20) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) 1.500792895s ago: executing program 4 (id=9843): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000020000080007000000", @ANYRES32=r1, @ANYBLOB="809e720425"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', r1, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, {}, 0xf0ffdfff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "d1000000"}]}, 0x54}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r7, r6}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000000206010800000000000000000200000004000780140007800027ab00000600050700000000050001000700000005000400000000000900020073797a31000400000000000000797a3100000000"], 0x54}}, 0x0) 1.495182156s ago: executing program 5 (id=9844): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x5}, @TCA_CT_LABELS={0x14, 0x7, "2d71dc84871c83bdc06b16dfd848cdaf"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = socket(0x400000000010, 0x3, 0x0) setuid(0xee01) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x5f, 0x20000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6, @ANYRES32=r1, @ANYRES64, @ANYRES32=0x0], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x9, 0xfffffffd, 0x9}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1.057205936s ago: executing program 0 (id=9851): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000003000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000006bb01f3a31f300000000000000000000000000000000000000000003f1ff2a8fbf6b4dc646c8d96e07a0cb3349b85133eaf1537766edc01a9832c4d875bcb1593dc6d0d7d92416ee814dfbcc41749182f1a6e324e24f7a0cec503325a553089f38375eb19267aed6963799ae596af19001000000088ff2b5ddb62e5060c86ee45c14fd77a529d6d9256c4496415e77ea3a78e0b54ebf3041045ebf268991503092879c0f116f35313be639053725e9da00511ba9e651648a30cda7b77a4cfd75715e9e74ccd4e84be52f47dd36d9e30000000bb8e70c87ffbdb5061f5d75fc0710e0764c17d333918f5c35c697474857835d5a4a1bf4b0ae2ea40b1bc000"/266], 0x50) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x29}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="4c00000000000000000000000071946626000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0x0, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x7f, 0x3, 0x0, @loopback, @private1, 0x1, 0x1, 0xdde7, 0xfb52}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000340)={0xa, 0x4e1f, 0x1, @loopback, 0x2}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0x706, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}, 0x1c) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x103599, @remote, 0x7}, 0x1c) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r11, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xb) accept(r7, 0x0, &(0x7f0000000500)) 990.016181ms ago: executing program 0 (id=9852): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003bbbbbbbbbbbb0806000608100604"], 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0xb0f7, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x6000, 0x6000, 0x0, &(0x7f0000ff7000/0x6000)=nil) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 973.899952ms ago: executing program 0 (id=9853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000000000"], 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, 0x0, 0x0, 0x20033, 0x51b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r7, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001004000980280000000c0a010100000000000000000a00000314000380100000800c00018005000100d100000014000000000a050000000000000000000a000004140000001100010000000000000005000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 718.04263ms ago: executing program 2 (id=9856): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c05}, 0x4000851) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf89, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x8300, 0x10001, 0xfffffffd, 0x3, 0xabce, 0x85, 0x101, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x2a, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c8202) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x24, &(0x7f0000000000), 0x4) unshare(0x2c020400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) socket(0x2, 0x80805, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) syz_emit_ethernet(0x86, &(0x7f0000000540)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x88d, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@local}, {@multicast2, 0xb00}, {@local}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@rand_addr=0x64010101}, {@multicast1}]}]}}}}}}}, 0x0) splice(r8, 0x0, r6, 0x0, 0x400009, 0x4) fcntl$setpipe(r6, 0x407, 0x69e) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r5], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x11, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008004}, 0x20048090) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x1, 0x0, 0x406, 0x80000, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x65, 0x0, 0xc, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x6, [{@local, 0x63}]}, @timestamp_addr={0x44, 0x1c, 0xce, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x3}, {@remote}, {@loopback, 0x2}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtclass={0x6c, 0x28, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x9, 0x9}, {0x8, 0x9}, {0xffff, 0xfff1}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @TCA_RATE={0x6, 0x5, {0xa8, 0x9}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6}, @tclass_kind_options=@c_netem={0xa}]}, 0xffffffffffffff74}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, 0x0, 0x0) 670.903414ms ago: executing program 2 (id=9857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 605.034278ms ago: executing program 2 (id=9858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8043}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "0200dac8f8e300f5154b31490a10933707"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x120}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 604.632688ms ago: executing program 2 (id=9859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="df250100000008000100030200001c000c800c00110308000a005a7600000a00b51200000c00088004005f55a32402000100"/60], 0x48}}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x72, 0x1002, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000001, 0x5, 0x8, 0x401, 0x0, 0x4, 0x7ff, 0xb, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x6, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0xd, 0x40006, 0x4800000000000000, 0x6, 0x8, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x4, 0x2, 0xfffffffffffffffc, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x8, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x43) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x800e, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd49900", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x0, 0x8b]}}) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x591) close(0x3) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e0000eb1cdf16662c415719082abd70"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) 567.553651ms ago: executing program 4 (id=9860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 2) 565.659551ms ago: executing program 2 (id=9861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 509.915984ms ago: executing program 2 (id=9862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7fff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x47f1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc041}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) 272.092721ms ago: executing program 4 (id=9863): r0 = socket$phonet(0x23, 0x2, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x80) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8010) 271.965281ms ago: executing program 4 (id=9864): socket$inet_tcp(0x2, 0x1, 0x0) r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)={0x2, 0x2}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) 267.746121ms ago: executing program 4 (id=9865): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x80dbc, 0xf, 0x8, 0xffffffff, 0x7, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = msgget$private(0x0, 0x790) msgsnd(r2, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) 261.033972ms ago: executing program 5 (id=9866): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x3, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @broadcast}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000001040101000000000000000003000005050001000100007c00000000000000080a0002000000000902000000063767bf8bf0f56c6d9ce7a35e4247f29e2435adaaef6417c2d38fd07cc1b32709134d439e74d1e54bf439f1cabb636be5d0a13d985977bab30e09d7ce650d72abf5cc64b0dc45d8c0f7b5f8b5ca867ca651d432862cec1c4a2dfd7d7dd981eaa096f1983b4de8d15cc5e1465466144894da86f6cd5cc74db49effcd0e7e807130324705fca18b8c51881f98bf43dce8b3ea0cfcc8312861f29a1c0e32e57cc56a0430215e20171eabd84df4c89cef37c90d4e2a989532bc082d9d66a369409542ecf1daa23f3e058ba9b19d1dba7c7e6cadd08fd1d941035e96c1699305f3c8f259b9"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffbfffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast2}}}}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000140)=""/248) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000400), 0xb}, 0xc0c8, 0x0, 0x0, 0x5, 0x9, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 202.001626ms ago: executing program 6 (id=9867): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x26020480) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 190.539747ms ago: executing program 5 (id=9868): socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c05}, 0x4000851) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf89, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x8300, 0x10001, 0xfffffffd, 0x3, 0xabce, 0x85, 0x101, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x2a, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c8202) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x24, &(0x7f0000000000), 0x4) unshare(0x2c020400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) socket(0x2, 0x80805, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) syz_emit_ethernet(0x86, &(0x7f0000000540)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x88d, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@local}, {@multicast2, 0xb00}, {@local}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@rand_addr=0x64010101}, {@multicast1}]}]}}}}}}}, 0x0) splice(r5, 0x0, r4, 0x0, 0x400009, 0x4) fcntl$setpipe(r4, 0x407, 0x69e) 71.896775ms ago: executing program 5 (id=9869): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @remote, @remote, @remote}}}}, 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x4}]}}}], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/110, 0x6e}, 0x200}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 62.820916ms ago: executing program 6 (id=9870): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'nicvf0\x00', {'erspan0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @netfilter}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000340), 0x4) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x1a5, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000000400000004"], 0x48) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e22, 0x5, @mcast2, 0x2}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r8 = dup(r1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000040)={0x530b214b}, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000002c0)={&(0x7f0000000100)=""/249, 0xf9, 0x0, 0x4}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) ioctl$HIDIOCGCOLLECTIONINDEX(r8, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x2, 0x8, 0xd, 0x3}) openat$cgroup_ro(r6, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={&(0x7f00000003c0)="8c5f8958617bd0dd2ea51d2539ecea573ffa18f0c7fc0c354c619dace1d2b9d0d9d0e17c9b65eca805178b362b859328898612d00f2291749316bf44aa21429859a9a964aaf67b4993ac3eae299be76e8d50d521585b3609d2d9fc4b7c6e6050f5767d831404fa9dbd3ebd394b03b945", &(0x7f0000000500)=""/218, &(0x7f0000000740)="9d143f4305381926e6b50abf66286f9910a59307b33c4a00f484b5b8ca5eb2de1b44558e0cac3b3b0b618b0a154d097469d715b646cfc871be4535016f72b881b713cc3c9efa7d1cc8a548a6b75f3b132fa65cf1dab51b0f1d6af2388002846ab65d859a27f67867b220563f061ba00dea03c5369e7c402de0cfa41a2e3f54e235b5b1d273589cd47267b6b9d0e4d2eb0e24421011", &(0x7f0000000940)="1854b51d326130d93c7041234d8f024194760da9fc72cff36015978f703368ff3b2e2479a81e0831c742aaf50dca78bd0642c07d138e5eba2838ed0fb769f0870556a7fa85d32dea302d69952220c996079f46232f734767941f8678e6b1df99377acc71498eda23d57337b3d43065c77353fbc0387f0fad6be212fb3b5573abb4a76f2ec9", 0x101, r7, 0x4}, 0x38) 38.836277ms ago: executing program 5 (id=9871): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/110, 0x6e}, 0x200}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 28.969368ms ago: executing program 0 (id=9872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 938.28µs ago: executing program 0 (id=9873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 0s ago: executing program 0 (id=9874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100810, 0x36, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[], 0x20) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@delchain={0x78, 0x65, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffe0, 0xf}, {0x1, 0x4}, {0x6, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x1, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}, @TCA_RATE={0x6, 0x5, {0x75, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000003c0)=0x3, 0x2) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r8 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r8, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010101}}}, @ip_retopts={{0x10}}], 0x30}, 0x1c880) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x326, &(0x7f0000000ac0)="$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") (async) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x8, 0xf}, {}, {0x7, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) kernel console output (not intermixed with test programs): 9] sctp: [Deprecated]: syz.6.9408 (pid 5069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1200.454565][ T5069] Use struct sctp_sack_info instead [ 1201.133801][ T5083] loop6: detected capacity change from 0 to 512 [ 1201.400213][ T5083] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1201.432897][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1201.432913][ T28] audit: type=1400 audit(2000000548.514:15699): avc: denied { write } for pid=5087 comm="syz.0.9414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1201.462676][ T5083] EXT4-fs (loop6): 1 truncate cleaned up [ 1201.481413][ T5083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.513108][ T5092] FAULT_INJECTION: forcing a failure. [ 1201.513108][ T5092] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.538455][ T5092] CPU: 1 UID: 0 PID: 5092 Comm: syz.0.9415 Tainted: G W syzkaller #0 PREEMPT(full) [ 1201.538490][ T5092] Tainted: [W]=WARN [ 1201.538500][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1201.538515][ T5092] Call Trace: [ 1201.538523][ T5092] [ 1201.538532][ T5092] __dump_stack+0x1d/0x30 [ 1201.538587][ T5092] dump_stack_lvl+0x95/0xd0 [ 1201.538610][ T5092] dump_stack+0x15/0x1b [ 1201.538636][ T5092] should_fail_ex+0x263/0x280 [ 1201.538663][ T5092] should_failslab+0x8c/0xb0 [ 1201.538757][ T5092] kmem_cache_alloc_noprof+0x66/0x400 [ 1201.538779][ T5092] ? security_inode_alloc+0x37/0x100 [ 1201.538810][ T5092] security_inode_alloc+0x37/0x100 [ 1201.538865][ T5092] inode_init_always_gfp+0x4b7/0x500 [ 1201.538950][ T5092] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1201.538986][ T5092] alloc_inode+0x58/0x170 [ 1201.539011][ T5092] new_inode+0x1d/0xe0 [ 1201.539035][ T5092] __debugfs_create_file+0x97/0x2b0 [ 1201.539114][ T5092] debugfs_create_file_full+0x3f/0x60 [ 1201.539142][ T5092] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 1201.539175][ T5092] ref_tracker_dir_debugfs+0x10e/0x220 [ 1201.539250][ T5092] alloc_netdev_mqs+0x1a7/0xa40 [ 1201.539364][ T5092] rtnl_create_link+0x239/0x720 [ 1201.539414][ T5092] rtnl_newlink_create+0x174/0x650 [ 1201.539497][ T5092] ? security_capable+0x7b/0x90 [ 1201.539524][ T5092] ? netlink_ns_capable+0x86/0xa0 [ 1201.539634][ T5092] rtnl_newlink+0x10a0/0x1330 [ 1201.539736][ T5092] ? css_rstat_updated+0xbb/0x280 [ 1201.539757][ T5092] ? __memcg_slab_free_hook+0x14b/0x240 [ 1201.539785][ T5092] ? __rcu_read_unlock+0x4e/0x70 [ 1201.539805][ T5092] ? avc_has_perm_noaudit+0xab/0x130 [ 1201.539922][ T5092] ? cred_has_capability+0x224/0x2a0 [ 1201.540017][ T5092] ? selinux_capable+0x31/0x40 [ 1201.540054][ T5092] ? security_capable+0x7b/0x90 [ 1201.540083][ T5092] ? ns_capable+0x7c/0xb0 [ 1201.540165][ T5092] ? __pfx_rtnl_newlink+0x10/0x10 [ 1201.540197][ T5092] rtnetlink_rcv_msg+0x64b/0x720 [ 1201.540269][ T5092] netlink_rcv_skb+0x123/0x220 [ 1201.540307][ T5092] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1201.540332][ T5092] rtnetlink_rcv+0x1c/0x30 [ 1201.540351][ T5092] netlink_unicast+0x5c0/0x690 [ 1201.540499][ T5092] netlink_sendmsg+0x5c8/0x6f0 [ 1201.540525][ T5092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.540548][ T5092] ____sys_sendmsg+0x563/0x5b0 [ 1201.540587][ T5092] ___sys_sendmsg+0x195/0x1e0 [ 1201.540695][ T5092] __x64_sys_sendmsg+0xd4/0x160 [ 1201.540722][ T5092] x64_sys_call+0x194c/0x3020 [ 1201.540754][ T5092] do_syscall_64+0x12c/0x370 [ 1201.540950][ T5092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.540995][ T5092] RIP: 0033:0x7f0cdbcec819 [ 1201.541016][ T5092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.541035][ T5092] RSP: 002b:00007f0cda73f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.541139][ T5092] RAX: ffffffffffffffda RBX: 00007f0cdbf65fa0 RCX: 00007f0cdbcec819 [ 1201.541157][ T5092] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1201.541174][ T5092] RBP: 00007f0cda73f090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.541188][ T5092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.541229][ T5092] R13: 00007f0cdbf66038 R14: 00007f0cdbf65fa0 R15: 00007fff09998ca8 [ 1201.541250][ T5092] [ 1201.541260][ T5092] debugfs: out of free dentries, can not create file 'netdev@ffff88811beef560' [ 1201.920527][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.805000][ T28] audit: type=1400 audit(2000000549.824:15700): avc: denied { create } for pid=5109 comm="syz.0.9419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1203.882593][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.901277][T26499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.912282][ T28] audit: type=1400 audit(2000000549.824:15701): avc: denied { connect } for pid=5109 comm="syz.0.9419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1204.841329][ T28] audit: type=1400 audit(2000000549.824:15702): avc: denied { ioctl } for pid=5109 comm="syz.0.9419" path="socket:[106067]" dev="sockfs" ino=106067 ioctlcmd=0x6e86 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1204.866635][ T28] audit: type=1400 audit(2000000549.824:15703): avc: denied { create } for pid=5109 comm="syz.0.9419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1204.954704][ T28] audit: type=1400 audit(2000000550.806:15704): avc: denied { setopt } for pid=5109 comm="syz.0.9419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1204.982808][ T28] audit: type=1400 audit(2000000550.806:15705): avc: denied { create } for pid=5109 comm="syz.0.9419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1205.783521][ T5136] loop4: detected capacity change from 0 to 1024 [ 1205.808319][ T5136] EXT4-fs: Ignoring removed mblk_io_submit option [ 1205.815010][ T5136] EXT4-fs: Ignoring removed oldalloc option [ 1205.918473][ T5136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1205.943694][ T5136] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.463292][ T28] audit: type=1400 audit(2000000553.256:15706): avc: denied { create } for pid=5135 comm="syz.4.9428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1206.485664][ T5136] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: block 3: comm syz.4.9428: lblock 3 mapped to illegal pblock 3 (length 3) [ 1206.489909][ T28] audit: type=1400 audit(2000000553.256:15707): avc: denied { connect } for pid=5135 comm="syz.4.9428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1206.520254][ T28] audit: type=1400 audit(2000000553.293:15708): avc: denied { getopt } for pid=5154 comm="syz.1.9431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1206.520378][ T5136] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1206.553280][ T5136] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1206.553280][ T5136] [ 1206.574655][ T9347] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:26: lblock 8 mapped to illegal pblock 8 (length 8) [ 1206.590533][ T9347] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1206.606992][ T9347] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1206.606992][ T9347] [ 1206.617399][T32307] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1206.633577][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1206.709668][ T5163] loop4: detected capacity change from 0 to 512 [ 1206.876431][ T5163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1207.270232][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1207.270309][ T28] audit: type=1400 audit(2000000554.004:15712): avc: denied { create } for pid=5159 comm="syz.0.9433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1207.499766][ T28] audit: type=1400 audit(2000000554.060:15713): avc: denied { connect } for pid=5159 comm="syz.0.9433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1208.759339][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.803275][ T5194] netlink: 'syz.5.9444': attribute type 1 has an invalid length. [ 1208.837623][ T5194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1209.109239][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9441'. [ 1209.363523][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9444'. [ 1209.372530][ T28] audit: type=1400 audit(2000000555.968:15714): avc: denied { create } for pid=5193 comm="syz.5.9444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1209.443867][ T5194] bond2: (slave bridge2): making interface the new active one [ 1209.459935][ T28] audit: type=1400 audit(2000000555.968:15715): avc: denied { ioctl } for pid=5193 comm="syz.5.9444" path="socket:[107146]" dev="sockfs" ino=107146 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1209.502303][ T5194] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1209.569458][ T28] audit: type=1400 audit(2000000556.155:15716): avc: denied { block_suspend } for pid=5210 comm="syz.0.9446" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1209.592813][ T5213] loop4: detected capacity change from 0 to 512 [ 1209.635046][ T5213] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.9447: corrupted in-inode xattr: invalid size in ea xattr [ 1209.673350][ T5213] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1209.673573][ T5213] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.9447: couldn't read orphan inode 15 (err -117) [ 1209.682976][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1209.682996][ C0] EXT4-fs (loop4): initial error at time 2000000556: ext4_iget_extra_inode:5040: inode 15 [ 1209.683037][ C0] EXT4-fs (loop4): last error at time 2000000556: ext4_iget_extra_inode:5040: inode 15 [ 1209.766433][ T5213] loop4: lost filesystem error report for type 5 error -117 [ 1209.810855][ T5213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.999621][ T5213] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.9447: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1210.412827][ T5217] loop1: detected capacity change from 0 to 512 [ 1210.427854][ T28] audit: type=1400 audit(2000000556.969:15717): avc: denied { create } for pid=5211 comm="syz.4.9447" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1210.471597][ T5234] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.9447: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1210.607159][ T5217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1210.651805][ T5236] loop5: detected capacity change from 0 to 512 [ 1210.861364][ T5236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1210.902480][ T5217] EXT4-fs (loop1): 1 truncate cleaned up [ 1210.910978][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.945179][ T5236] siw: device registration error -23 [ 1211.001694][ T5217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.056093][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.166692][ T28] audit: type=1400 audit(2000000557.652:15718): avc: denied { setopt } for pid=5244 comm="syz.5.9456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1211.844662][ T5248] loop5: detected capacity change from 0 to 512 [ 1211.862037][ T28] audit: type=1400 audit(2000000558.269:15719): avc: denied { firmware_load } for pid=5244 comm="syz.5.9456" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1211.935025][ T5248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1212.036928][ T5248] EXT4-fs (loop5): 1 truncate cleaned up [ 1212.044402][ T5248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.238899][ T28] audit: type=1400 audit(2000000558.503:15720): avc: denied { getopt } for pid=5244 comm="syz.5.9456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1212.278332][ T5254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9458'. [ 1212.298103][ T28] audit: type=1400 audit(2000000558.709:15721): avc: denied { write } for pid=5239 comm="syz.0.9454" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1212.310413][ T5254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1212.404576][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.424159][ T5258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9460'. [ 1212.588951][T31362] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.683138][ T28] audit: type=1400 audit(2000000559.055:15722): avc: denied { create } for pid=5270 comm="syz.5.9465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1213.711504][ T5289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9463'. [ 1213.720650][ T28] audit: type=1400 audit(2000000559.064:15723): avc: denied { ioctl } for pid=5270 comm="syz.5.9465" path="socket:[106275]" dev="sockfs" ino=106275 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1213.746872][ T28] audit: type=1400 audit(2000000559.260:15724): avc: denied { read } for pid=5273 comm="syz.1.9463" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1214.787068][ T28] audit: type=1400 audit(2000000559.260:15725): avc: denied { open } for pid=5273 comm="syz.1.9463" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1214.811862][ T28] audit: type=1400 audit(2000000559.270:15726): avc: denied { ioctl } for pid=5273 comm="syz.1.9463" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1215.876516][ T28] audit: type=1400 audit(2000000561.084:15727): avc: denied { map } for pid=5296 comm="syz.0.9468" path="socket:[106334]" dev="sockfs" ino=106334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1217.704371][ T5301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9469'. [ 1217.827222][ T5318] loop5: detected capacity change from 0 to 512 [ 1217.866181][ T5318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1217.929642][ T5318] siw: device registration error -23 [ 1218.431056][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.822958][ T5332] loop1: detected capacity change from 0 to 4096 [ 1220.297631][ T5332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1220.331220][ T5341] syzkaller0: entered promiscuous mode [ 1220.336744][ T5341] syzkaller0: entered allmulticast mode [ 1220.437106][ T28] audit: type=1400 audit(2000000566.322:15728): avc: denied { name_connect } for pid=5340 comm="syz.5.9478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1220.539039][ T5347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9477'. [ 1221.515153][ T3414] kernel write not supported for file /607/oom_adj (pid: 3414 comm: kworker/1:5) [ 1221.537896][ T28] audit: type=1400 audit(2000000567.360:15729): avc: denied { create } for pid=5359 comm="syz.5.9482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 1221.611081][ T28] audit: type=1400 audit(2000000567.407:15730): avc: denied { map } for pid=5354 comm="syz.6.9481" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=106402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1221.696458][ T28] audit: type=1400 audit(2000000567.407:15731): avc: denied { read write } for pid=5354 comm="syz.6.9481" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=106402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1221.779629][ T5372] syzkaller0: entered promiscuous mode [ 1221.795150][ T28] audit: type=1326 audit(2000000567.594:15732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.6.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aff9c819 code=0x7ffc0000 [ 1221.824963][ T5372] syzkaller0: entered allmulticast mode [ 1221.962032][ T28] audit: type=1326 audit(2000000567.594:15733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.6.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aff9c819 code=0x7ffc0000 [ 1221.986087][ T5372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.986134][ T28] audit: type=1326 audit(2000000567.594:15734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.6.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aff9c819 code=0x7ffc0000 [ 1221.994564][ T5383] loop5: detected capacity change from 0 to 256 [ 1222.017716][ T28] audit: type=1326 audit(2000000567.594:15735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.6.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f94aff9c819 code=0x7ffc0000 [ 1222.049703][ T28] audit: type=1326 audit(2000000567.622:15736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.6.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aff9c819 code=0x7ffc0000 [ 1222.074101][ T28] audit: type=1326 audit(2000000567.622:15737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.6.9488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aff9c819 code=0x7ffc0000 [ 1222.540302][ T5383] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1222.615458][ T5391] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1222.646374][ T5391] FAT-fs (loop5): Filesystem has been set read-only [ 1222.659106][ T5391] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1222.690489][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9493'. [ 1222.712207][ T5395] netlink: 'syz.0.9493': attribute type 1 has an invalid length. [ 1222.722871][ T5395] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9493'. [ 1222.850496][ T5397] FAULT_INJECTION: forcing a failure. [ 1222.850496][ T5397] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.877189][ T5397] CPU: 1 UID: 0 PID: 5397 Comm: syz.6.9495 Tainted: G W syzkaller #0 PREEMPT(full) [ 1222.877223][ T5397] Tainted: [W]=WARN [ 1222.877233][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1222.877250][ T5397] Call Trace: [ 1222.877257][ T5397] [ 1222.877265][ T5397] __dump_stack+0x1d/0x30 [ 1222.877295][ T5397] dump_stack_lvl+0x95/0xd0 [ 1222.877396][ T5397] dump_stack+0x15/0x1b [ 1222.877434][ T5397] should_fail_ex+0x263/0x280 [ 1222.877532][ T5397] should_failslab+0x8c/0xb0 [ 1222.877566][ T5397] __kmalloc_noprof+0xb8/0x4e0 [ 1222.877592][ T5397] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 1222.877628][ T5397] usb_hcd_submit_urb+0x5d3/0x1200 [ 1222.877681][ T5397] usb_submit_urb+0xaaa/0xbb0 [ 1222.877755][ T5397] usbfs_start_wait_urb+0x9f/0x1d0 [ 1222.877778][ T5397] do_proc_control+0x618/0x8a0 [ 1222.877837][ T5397] proc_control_compat+0xb9/0xe0 [ 1222.877857][ T5397] usbdev_ioctl+0xed7/0x1750 [ 1222.877960][ T5397] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1222.877994][ T5397] __se_sys_ioctl+0xce/0x140 [ 1222.878066][ T5397] __x64_sys_ioctl+0x43/0x50 [ 1222.878085][ T5397] x64_sys_call+0x1563/0x3020 [ 1222.878114][ T5397] do_syscall_64+0x12c/0x370 [ 1222.878154][ T5397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.878205][ T5397] RIP: 0033:0x7f94aff9c819 [ 1222.878226][ T5397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.878265][ T5397] RSP: 002b:00007f94ae9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1222.878292][ T5397] RAX: ffffffffffffffda RBX: 00007f94b0215fa0 RCX: 00007f94aff9c819 [ 1222.878453][ T5397] RDX: 0000200000000040 RSI: 00000000c0105500 RDI: 0000000000000003 [ 1222.878469][ T5397] RBP: 00007f94ae9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.878484][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.878500][ T5397] R13: 00007f94b0216038 R14: 00007f94b0215fa0 R15: 00007ffce10fac18 [ 1222.878521][ T5397] [ 1222.889557][ T5400] syzkaller0: entered promiscuous mode [ 1222.917490][ T5400] syzkaller0: entered allmulticast mode [ 1223.093808][ T5391] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1223.126937][ T5405] loop6: detected capacity change from 0 to 512 [ 1223.164137][ T5405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1223.194264][ T5405] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.316029][ T5414] netlink: 'syz.0.9498': attribute type 10 has an invalid length. [ 1223.438544][ T5414] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1223.831050][T26499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.887679][T31362] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.900446][ T5442] loop6: detected capacity change from 0 to 1024 [ 1224.910888][ T5442] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1224.931242][ T5442] JBD2: no valid journal superblock found [ 1224.945492][ T5442] EXT4-fs (loop6): Could not load journal inode [ 1224.974254][ T5443] netlink: 'syz.5.9508': attribute type 1 has an invalid length. [ 1225.004866][ T5446] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9509'. [ 1225.029086][ T5443] netlink: 'syz.5.9508': attribute type 1 has an invalid length. [ 1225.071123][ T5443] netlink: 'syz.5.9508': attribute type 1 has an invalid length. [ 1225.094765][ T5447] loop5: detected capacity change from 0 to 1024 [ 1225.154529][ T5447] journal_path: not usable as path [ 1225.197819][ T5447] EXT4-fs: error: could not find journal device path [ 1225.938402][ T28] kauditd_printk_skb: 285 callbacks suppressed [ 1225.938421][ T28] audit: type=1400 audit(2000000571.176:16023): avc: denied { open } for pid=5454 comm="syz.1.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1226.008557][ T28] audit: type=1400 audit(2000000571.176:16024): avc: denied { perfmon } for pid=5454 comm="syz.1.9513" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1226.036673][ T28] audit: type=1400 audit(2000000571.176:16025): avc: denied { kernel } for pid=5454 comm="syz.1.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1226.070756][ T28] audit: type=1400 audit(2000000571.185:16026): avc: denied { create } for pid=5454 comm="syz.1.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1226.108384][ T28] audit: type=1400 audit(2000000571.185:16027): avc: denied { write } for pid=5454 comm="syz.1.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1226.171756][ T5472] loop4: detected capacity change from 0 to 512 [ 1226.219095][ T5472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1226.230238][ T28] audit: type=1400 audit(2000000571.466:16028): avc: denied { allowed } for pid=5452 comm="syz.6.9512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1226.260740][ T5475] netlink: 763 bytes leftover after parsing attributes in process `syz.1.9518'. [ 1226.273456][ T5472] EXT4-fs (loop4): 1 truncate cleaned up [ 1226.290863][ T5472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.312397][ T5477] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1226.317796][ T28] audit: type=1400 audit(2000000571.503:16029): avc: denied { setopt } for pid=5461 comm="syz.4.9514" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1226.349956][ T28] audit: type=1400 audit(2000000571.541:16030): avc: denied { read write } for pid=1976 comm="syz-executor" name="loop0" dev="devtmpfs" ino=2775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1226.374689][ T28] audit: type=1400 audit(2000000571.550:16031): avc: denied { open } for pid=1976 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1226.399181][ T28] audit: type=1400 audit(2000000571.569:16032): avc: denied { module_request } for pid=5452 comm="syz.6.9512" kmod="net-pf-2-proto-5-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1226.511249][ T5472] netlink: 'syz.4.9516': attribute type 5 has an invalid length. [ 1226.588398][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.652207][ T5503] loop4: detected capacity change from 0 to 512 [ 1226.764837][ T5484] loop5: detected capacity change from 0 to 512 [ 1226.843300][ T5510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9527'. [ 1226.862926][ T5484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1226.991986][ T5515] FAULT_INJECTION: forcing a failure. [ 1226.991986][ T5515] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.024237][ T5484] EXT4-fs (loop5): 1 truncate cleaned up [ 1227.034630][ T5510] SELinux: policydb magic number 0x840 does not match expected magic number 0xf97cff8c [ 1227.048448][ T5484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.081332][ T5515] CPU: 0 UID: 0 PID: 5515 Comm: syz.6.9530 Tainted: G W syzkaller #0 PREEMPT(full) [ 1227.081460][ T5515] Tainted: [W]=WARN [ 1227.081467][ T5515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1227.081503][ T5515] Call Trace: [ 1227.081512][ T5515] [ 1227.081521][ T5515] __dump_stack+0x1d/0x30 [ 1227.081548][ T5515] dump_stack_lvl+0x95/0xd0 [ 1227.081570][ T5515] dump_stack+0x15/0x1b [ 1227.081591][ T5515] should_fail_ex+0x263/0x280 [ 1227.081666][ T5515] ? cgroup_show_path+0x6a/0x2b0 [ 1227.081702][ T5515] should_failslab+0x8c/0xb0 [ 1227.081746][ T5515] __kmalloc_cache_noprof+0x5f/0x410 [ 1227.081776][ T5515] ? __pfx_cgroup_show_path+0x10/0x10 [ 1227.081810][ T5515] cgroup_show_path+0x6a/0x2b0 [ 1227.081931][ T5515] ? kernfs_sop_show_path+0xa4/0xf0 [ 1227.081957][ T5515] ? __pfx_cgroup_show_path+0x10/0x10 [ 1227.081993][ T5515] kernfs_sop_show_path+0xb6/0xf0 [ 1227.082016][ T5515] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 1227.082062][ T5515] show_path+0x5a/0x80 [ 1227.082088][ T5515] show_mountinfo+0xe5/0x690 [ 1227.082126][ T5515] m_show+0x3e/0x50 [ 1227.082233][ T5515] traverse+0x149/0x3a0 [ 1227.082263][ T5515] seq_lseek+0xb5/0x170 [ 1227.082295][ T5515] __x64_sys_lseek+0xe8/0x160 [ 1227.082374][ T5515] x64_sys_call+0x27ec/0x3020 [ 1227.082400][ T5515] do_syscall_64+0x12c/0x370 [ 1227.082513][ T5515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.082538][ T5515] RIP: 0033:0x7f94aff9c819 [ 1227.082557][ T5515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.082654][ T5515] RSP: 002b:00007f94ae9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 1227.082680][ T5515] RAX: ffffffffffffffda RBX: 00007f94b0215fa0 RCX: 00007f94aff9c819 [ 1227.082698][ T5515] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000003 [ 1227.082714][ T5515] RBP: 00007f94ae9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.082747][ T5515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.082759][ T5515] R13: 00007f94b0216038 R14: 00007f94b0215fa0 R15: 00007ffce10fac18 [ 1227.082778][ T5515] [ 1227.084269][ T5513] netlink: 'syz.4.9525': attribute type 1 has an invalid length. [ 1227.093432][ T5510] SELinux: failed to load policy [ 1227.311493][ T5513] netlink: 632 bytes leftover after parsing attributes in process `syz.4.9525'. [ 1227.679874][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9533'. [ 1227.721942][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9533'. [ 1227.750694][ T4567] Bluetooth: hci0: Frame reassembly failed (-84) [ 1228.057241][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.539356][ T5549] --map-set only usable from mangle table [ 1229.911026][ T5569] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1229.943966][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1229.950275][ T5534] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1230.046915][ T5572] ip6tnl1: entered promiscuous mode [ 1230.147341][ T5576] loop5: detected capacity change from 0 to 256 [ 1230.181256][ T5576] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1230.278969][ T5577] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1230.299691][ T5577] FAT-fs (loop5): Filesystem has been set read-only [ 1230.332009][ T5577] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1230.404430][ T6033] Bluetooth: hci0: Frame reassembly failed (-84) [ 1230.424343][ T3240] Bluetooth: hci0: Malformed Event: 0x02 [ 1230.431636][ T5581] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9549'. [ 1230.460562][ T5577] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1230.817072][ T5593] FAULT_INJECTION: forcing a failure. [ 1230.817072][ T5593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.831609][ T5595] openvswitch: netlink: Key type 1542 is out of range max 32 [ 1230.851984][ T5593] CPU: 1 UID: 0 PID: 5593 Comm: syz.6.9554 Tainted: G W syzkaller #0 PREEMPT(full) [ 1230.852021][ T5593] Tainted: [W]=WARN [ 1230.852028][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1230.852041][ T5593] Call Trace: [ 1230.852049][ T5593] [ 1230.852064][ T5593] __dump_stack+0x1d/0x30 [ 1230.852097][ T5593] dump_stack_lvl+0x95/0xd0 [ 1230.852185][ T5593] dump_stack+0x15/0x1b [ 1230.852213][ T5593] should_fail_ex+0x263/0x280 [ 1230.852247][ T5593] should_fail+0xb/0x20 [ 1230.852330][ T5593] should_fail_usercopy+0x1a/0x20 [ 1230.852419][ T5593] _copy_to_user+0x20/0xa0 [ 1230.852463][ T5593] simple_read_from_buffer+0xb5/0x130 [ 1230.852493][ T5593] proc_fail_nth_read+0x10e/0x150 [ 1230.852532][ T5593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1230.852603][ T5593] vfs_read+0x1ab/0x7f0 [ 1230.852656][ T5593] ? __rcu_read_unlock+0x4e/0x70 [ 1230.852708][ T5593] ? __fget_files+0x184/0x1c0 [ 1230.852751][ T5593] ? mutex_lock+0x57/0x90 [ 1230.852774][ T5593] ksys_read+0xdc/0x1a0 [ 1230.852793][ T5593] __x64_sys_read+0x40/0x50 [ 1230.852815][ T5593] x64_sys_call+0x2886/0x3020 [ 1230.852883][ T5593] do_syscall_64+0x12c/0x370 [ 1230.852989][ T5593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.853015][ T5593] RIP: 0033:0x7f94aff5d04e [ 1230.853062][ T5593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1230.853085][ T5593] RSP: 002b:00007f94ae9f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1230.853112][ T5593] RAX: ffffffffffffffda RBX: 00007f94ae9f76c0 RCX: 00007f94aff5d04e [ 1230.853134][ T5593] RDX: 000000000000000f RSI: 00007f94ae9f70a0 RDI: 0000000000000004 [ 1230.853150][ T5593] RBP: 00007f94ae9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.853166][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.853181][ T5593] R13: 00007f94b0216038 R14: 00007f94b0215fa0 R15: 00007ffce10fac18 [ 1230.853216][ T5593] [ 1231.850905][ T5597] loop5: detected capacity change from 0 to 512 [ 1231.897115][ T5597] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1231.954730][ T5597] EXT4-fs (loop5): 1 truncate cleaned up [ 1232.004052][ T5597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.021647][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 1232.021667][ T28] audit: type=1400 audit(2000000577.152:16235): avc: denied { name_bind } for pid=5607 comm="syz.0.9559" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1232.114811][ T28] audit: type=1326 audit(2000000577.227:16236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1232.139807][ T28] audit: type=1326 audit(2000000577.227:16237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1232.164404][ T28] audit: type=1326 audit(2000000577.227:16238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1232.188590][ T28] audit: type=1326 audit(2000000577.227:16239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1232.231066][ T28] audit: type=1326 audit(2000000577.227:16240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1232.259207][ T28] audit: type=1326 audit(2000000577.237:16241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1232.291300][ T5615] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9560'. [ 1232.331693][ T28] audit: type=1326 audit(2000000577.237:16242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1232.387358][ T5617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9562'. [ 1232.408727][ T28] audit: type=1326 audit(2000000577.237:16243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.0.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1232.447493][ T5615] loop6: detected capacity change from 0 to 8192 [ 1232.456614][ T28] audit: type=1400 audit(2000000577.349:16244): avc: denied { create } for pid=5610 comm="syz.6.9560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1232.503032][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.578275][ T5621] can0: slcan on ptm1. [ 1232.591604][ T3240] Bluetooth: hci0: command 0x1003 tx timeout [ 1232.597710][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1232.830273][ T5621] can0 (unregistered): slcan off ptm1. [ 1233.358251][ T5639] loop5: detected capacity change from 0 to 164 [ 1233.650624][ T5656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9568'. [ 1233.822978][ T5639] syzkaller0: entered promiscuous mode [ 1233.828638][ T5639] syzkaller0: entered allmulticast mode [ 1233.982435][ T5690] netlink: 'syz.0.9573': attribute type 10 has an invalid length. [ 1234.007290][ T5690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9573'. [ 1234.025750][ T5692] vhci_hcd vhci_hcd.0: invalid port number 10 [ 1234.031923][ T5692] vhci_hcd vhci_hcd.0: default hub control req: 2009 v0006 i000a l108 [ 1234.114912][ T5695] loop4: detected capacity change from 0 to 512 [ 1234.126249][ T5695] EXT4-fs: Ignoring removed i_version option [ 1234.141993][ T5695] EXT4-fs: Ignoring removed bh option [ 1234.169855][ T5695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.183165][ T5695] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1234.229589][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.477207][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.489423][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.919433][ T5712] FAULT_INJECTION: forcing a failure. [ 1234.919433][ T5712] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.954396][ T5712] CPU: 0 UID: 0 PID: 5712 Comm: syz.5.9581 Tainted: G W syzkaller #0 PREEMPT(full) [ 1234.954513][ T5712] Tainted: [W]=WARN [ 1234.954523][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1234.954538][ T5712] Call Trace: [ 1234.954546][ T5712] [ 1234.954554][ T5712] __dump_stack+0x1d/0x30 [ 1234.954581][ T5712] dump_stack_lvl+0x95/0xd0 [ 1234.954611][ T5712] dump_stack+0x15/0x1b [ 1234.954660][ T5712] should_fail_ex+0x263/0x280 [ 1234.954692][ T5712] should_failslab+0x8c/0xb0 [ 1234.954733][ T5712] kmem_cache_alloc_noprof+0x66/0x400 [ 1234.954760][ T5712] ? skb_clone+0x151/0x1f0 [ 1234.954825][ T5712] skb_clone+0x151/0x1f0 [ 1234.954844][ T5712] __netlink_deliver_tap+0x2c9/0x500 [ 1234.954943][ T5712] netlink_unicast+0x66b/0x690 [ 1234.954972][ T5712] netlink_sendmsg+0x5c8/0x6f0 [ 1234.954994][ T5712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.955017][ T5712] ____sys_sendmsg+0x563/0x5b0 [ 1234.955058][ T5712] ___sys_sendmsg+0x195/0x1e0 [ 1234.955079][ T5712] ? path_openat+0x1b01/0x2050 [ 1234.955108][ T5712] __sys_sendmmsg+0x185/0x320 [ 1234.955136][ T5712] __x64_sys_sendmmsg+0x57/0x70 [ 1234.955159][ T5712] x64_sys_call+0x27aa/0x3020 [ 1234.955244][ T5712] do_syscall_64+0x12c/0x370 [ 1234.955270][ T5712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.955294][ T5712] RIP: 0033:0x7f5e9ee9c819 [ 1234.955311][ T5712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.955357][ T5712] RSP: 002b:00007f5e9d8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1234.955383][ T5712] RAX: ffffffffffffffda RBX: 00007f5e9f115fa0 RCX: 00007f5e9ee9c819 [ 1234.955401][ T5712] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1234.955418][ T5712] RBP: 00007f5e9d8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.955467][ T5712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.955483][ T5712] R13: 00007f5e9f116038 R14: 00007f5e9f115fa0 R15: 00007ffc40499778 [ 1234.955504][ T5712] [ 1234.955583][ T5712] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9581'. [ 1235.276203][ T5712] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9581'. [ 1235.421470][ T5731] loop4: detected capacity change from 0 to 512 [ 1235.459334][ T5731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1235.482783][ T5731] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.9588: Unimplemented hash flags: 0x0001 [ 1235.494762][ T5731] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.9588: Corrupt directory, running e2fsck is recommended [ 1235.508859][ T5731] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.9588: path /287/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 1235.650702][ T5736] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9585'. [ 1235.840338][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.151809][ T5747] loop6: detected capacity change from 0 to 512 [ 1236.201090][ T5747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1236.227020][ T5747] siw: device registration error -23 [ 1236.238283][ T5750] FAULT_INJECTION: forcing a failure. [ 1236.238283][ T5750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.285198][ T5750] CPU: 1 UID: 0 PID: 5750 Comm: syz.0.9594 Tainted: G W syzkaller #0 PREEMPT(full) [ 1236.285238][ T5750] Tainted: [W]=WARN [ 1236.285247][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1236.285262][ T5750] Call Trace: [ 1236.285315][ T5750] [ 1236.285375][ T5750] __dump_stack+0x1d/0x30 [ 1236.285408][ T5750] dump_stack_lvl+0x95/0xd0 [ 1236.285435][ T5750] dump_stack+0x15/0x1b [ 1236.285461][ T5750] should_fail_ex+0x263/0x280 [ 1236.285577][ T5750] should_fail+0xb/0x20 [ 1236.285604][ T5750] should_fail_usercopy+0x1a/0x20 [ 1236.285714][ T5750] _copy_from_user+0x1c/0xb0 [ 1236.285748][ T5750] ____sys_sendmsg+0x1e2/0x5b0 [ 1236.285811][ T5750] ___sys_sendmsg+0x195/0x1e0 [ 1236.285842][ T5750] __x64_sys_sendmsg+0xd4/0x160 [ 1236.285866][ T5750] x64_sys_call+0x194c/0x3020 [ 1236.285934][ T5750] do_syscall_64+0x12c/0x370 [ 1236.285964][ T5750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.285988][ T5750] RIP: 0033:0x7f0cdbcec819 [ 1236.286008][ T5750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.286088][ T5750] RSP: 002b:00007f0cda73f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1236.286250][ T5750] RAX: ffffffffffffffda RBX: 00007f0cdbf65fa0 RCX: 00007f0cdbcec819 [ 1236.286269][ T5750] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1236.286285][ T5750] RBP: 00007f0cda73f090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.286299][ T5750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.286312][ T5750] R13: 00007f0cdbf66038 R14: 00007f0cdbf65fa0 R15: 00007fff09998ca8 [ 1236.286331][ T5750] [ 1236.286455][T26499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.595986][ T5759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30208 sclass=netlink_route_socket pid=5759 comm=syz.6.9598 [ 1237.103589][ T5773] loop4: detected capacity change from 0 to 128 [ 1239.355809][ T5787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9604'. [ 1239.806549][ T5792] loop6: detected capacity change from 0 to 512 [ 1239.876574][ T5792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1239.895090][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 1239.895106][ T28] audit: type=1400 audit(2000000584.522:16300): avc: denied { listen } for pid=5801 comm="syz.0.9610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1239.938554][ T5802] xt_hashlimit: size too large, truncated to 1048576 [ 1239.948882][ T28] audit: type=1400 audit(2000000584.560:16301): avc: denied { getopt } for pid=5801 comm="syz.0.9610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1239.949315][ T5792] siw: device registration error -23 [ 1239.991998][ T5803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9610'. [ 1240.001079][ T28] audit: type=1400 audit(2000000584.616:16302): avc: denied { ioctl } for pid=5801 comm="syz.0.9610" path="socket:[108132]" dev="sockfs" ino=108132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1240.033095][ T5803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9610'. [ 1240.086917][T26499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.272394][ T28] audit: type=1326 audit(2000000584.878:16303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5809 comm="syz.5.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ee9c819 code=0x7ffc0000 [ 1240.328538][ T28] audit: type=1326 audit(2000000584.878:16304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5809 comm="syz.5.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ee9c819 code=0x7ffc0000 [ 1240.373905][ T28] audit: type=1326 audit(2000000584.896:16305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5809 comm="syz.5.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ee9c819 code=0x7ffc0000 [ 1240.408943][ T5812] netlink: 'syz.5.9613': attribute type 1 has an invalid length. [ 1240.430009][ T5812] loop5: detected capacity change from 0 to 128 [ 1240.436429][ T28] audit: type=1326 audit(2000000584.896:16306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5809 comm="syz.5.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ee9c819 code=0x7ffc0000 [ 1240.461320][ T5812] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1240.486242][ T28] audit: type=1326 audit(2000000584.896:16307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5809 comm="syz.5.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f5e9ee9c819 code=0x7ffc0000 [ 1240.535609][ T28] audit: type=1326 audit(2000000584.896:16308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5809 comm="syz.5.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ee9c819 code=0x7ffc0000 [ 1240.581076][ T28] audit: type=1326 audit(2000000584.896:16309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5809 comm="syz.5.9612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ee9c819 code=0x7ffc0000 [ 1241.401871][ T5825] loop4: detected capacity change from 0 to 256 [ 1241.865525][ T5827] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9617'. [ 1242.417741][ T5835] SELinux: policydb magic number 0xf00 does not match expected magic number 0xf97cff8c [ 1242.427660][ T5835] SELinux: failed to load policy [ 1242.475458][ T5839] FAULT_INJECTION: forcing a failure. [ 1242.475458][ T5839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1242.489166][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz.5.9623 Tainted: G W syzkaller #0 PREEMPT(full) [ 1242.489257][ T5839] Tainted: [W]=WARN [ 1242.489264][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1242.489276][ T5839] Call Trace: [ 1242.489283][ T5839] [ 1242.489336][ T5839] __dump_stack+0x1d/0x30 [ 1242.489370][ T5839] dump_stack_lvl+0x95/0xd0 [ 1242.489419][ T5839] dump_stack+0x15/0x1b [ 1242.489446][ T5839] should_fail_ex+0x263/0x280 [ 1242.489481][ T5839] should_fail+0xb/0x20 [ 1242.489507][ T5839] should_fail_usercopy+0x1a/0x20 [ 1242.489543][ T5839] _copy_from_iter+0xcf/0xea0 [ 1242.489656][ T5839] ? alloc_pages_mpol+0x217/0x260 [ 1242.489695][ T5839] copy_page_from_iter+0x178/0x2a0 [ 1242.489744][ T5839] tun_get_user+0xbbd/0x27c0 [ 1242.489834][ T5839] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1242.489872][ T5839] tun_chr_write_iter+0x15e/0x210 [ 1242.489903][ T5839] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1242.490009][ T5839] vfs_write+0x5a6/0x9f0 [ 1242.490043][ T5839] ksys_write+0xdc/0x1a0 [ 1242.490062][ T5839] __x64_sys_write+0x40/0x50 [ 1242.490118][ T5839] x64_sys_call+0x27e1/0x3020 [ 1242.490151][ T5839] do_syscall_64+0x12c/0x370 [ 1242.490231][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.490305][ T5839] RIP: 0033:0x7f5e9ee5d04e [ 1242.490359][ T5839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1242.490381][ T5839] RSP: 002b:00007f5e9d8f6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1242.490407][ T5839] RAX: ffffffffffffffda RBX: 00007f5e9d8f76c0 RCX: 00007f5e9ee5d04e [ 1242.490426][ T5839] RDX: 0000000000000066 RSI: 0000200000000c00 RDI: 00000000000000c8 [ 1242.490473][ T5839] RBP: 00007f5e9d8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.490491][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.490530][ T5839] R13: 00007f5e9f116038 R14: 00007f5e9f115fa0 R15: 00007ffc40499778 [ 1242.490553][ T5839] [ 1242.796933][ T5849] netlink: 'syz.6.9625': attribute type 13 has an invalid length. [ 1242.850565][ T5853] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.9627'. [ 1243.044676][ T5856] loop5: detected capacity change from 0 to 512 [ 1243.101236][ T5856] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1243.126896][ T5858] netlink: 'syz.0.9629': attribute type 1 has an invalid length. [ 1243.185811][ T5856] EXT4-fs (loop5): 1 truncate cleaned up [ 1243.243155][ T5856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.791268][ T5884] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9636'. [ 1243.889243][ T5891] netlink: 'syz.4.9640': attribute type 2 has an invalid length. [ 1243.909230][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.916185][ T5891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1244.290270][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 1244.370704][ T5904] FAULT_INJECTION: forcing a failure. [ 1244.370704][ T5904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1244.393152][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: syz.5.9644 Tainted: G W syzkaller #0 PREEMPT(full) [ 1244.393189][ T5904] Tainted: [W]=WARN [ 1244.393197][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1244.393254][ T5904] Call Trace: [ 1244.393261][ T5904] [ 1244.393270][ T5904] __dump_stack+0x1d/0x30 [ 1244.393300][ T5904] dump_stack_lvl+0x95/0xd0 [ 1244.393326][ T5904] dump_stack+0x15/0x1b [ 1244.393350][ T5904] should_fail_ex+0x263/0x280 [ 1244.393446][ T5904] should_fail+0xb/0x20 [ 1244.393473][ T5904] should_fail_usercopy+0x1a/0x20 [ 1244.393506][ T5904] _copy_to_user+0x20/0xa0 [ 1244.393658][ T5904] simple_read_from_buffer+0xb5/0x130 [ 1244.393685][ T5904] proc_fail_nth_read+0x10e/0x150 [ 1244.393720][ T5904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1244.393821][ T5904] vfs_read+0x1ab/0x7f0 [ 1244.393842][ T5904] ? __rcu_read_unlock+0x4e/0x70 [ 1244.393866][ T5904] ? __fget_files+0x184/0x1c0 [ 1244.393894][ T5904] ? mutex_lock+0x57/0x90 [ 1244.393916][ T5904] ksys_read+0xdc/0x1a0 [ 1244.393938][ T5904] __x64_sys_read+0x40/0x50 [ 1244.394000][ T5904] x64_sys_call+0x2886/0x3020 [ 1244.394053][ T5904] do_syscall_64+0x12c/0x370 [ 1244.394121][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.394239][ T5904] RIP: 0033:0x7f5e9ee5d04e [ 1244.394296][ T5904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1244.394318][ T5904] RSP: 002b:00007f5e9d8f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1244.394342][ T5904] RAX: ffffffffffffffda RBX: 00007f5e9d8f76c0 RCX: 00007f5e9ee5d04e [ 1244.394359][ T5904] RDX: 000000000000000f RSI: 00007f5e9d8f70a0 RDI: 0000000000000003 [ 1244.394451][ T5904] RBP: 00007f5e9d8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.394465][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.394479][ T5904] R13: 00007f5e9f116038 R14: 00007f5e9f115fa0 R15: 00007ffc40499778 [ 1244.394552][ T5904] [ 1244.438967][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.599349][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.606589][ T5885] bridge_slave_0: entered allmulticast mode [ 1244.613269][ T5885] bridge_slave_0: entered promiscuous mode [ 1244.620316][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.627424][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.634838][ T5885] bridge_slave_1: entered allmulticast mode [ 1244.641450][ T5885] bridge_slave_1: entered promiscuous mode [ 1244.701321][ T5919] ip6tnl1: entered promiscuous mode [ 1244.743736][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.755374][ T3508] team0: Port device netdevsim1 removed [ 1244.771837][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.780593][ T5932] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9651'. [ 1244.799496][ T5932] bridge2: entered promiscuous mode [ 1244.806089][ T5932] bridge2: entered allmulticast mode [ 1244.862226][ T5934] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1244.880903][ T5934] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1244.901664][ T5934] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 1244.927568][ T5885] team0: Port device team_slave_0 added [ 1244.934430][ T5942] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 1244.945819][ T5942] SELinux: failed to load policy [ 1244.954335][ T5885] team0: Port device team_slave_1 added [ 1245.004068][ T5944] loop6: detected capacity change from 0 to 512 [ 1245.091891][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.099093][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.099373][ T5944] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1245.125353][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.126163][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.162128][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.196109][ T5948] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9654'. [ 1245.264165][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.403533][ T3508] bridge_slave_1: left allmulticast mode [ 1245.462382][ T3508] bridge_slave_1: left promiscuous mode [ 1245.477862][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9657'. [ 1245.506469][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.556830][ T3508] bridge_slave_0: left allmulticast mode [ 1245.588765][ T3508] bridge_slave_0: left promiscuous mode [ 1245.638174][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.683492][ T5944] EXT4-fs (loop6): 1 truncate cleaned up [ 1245.773496][ T5944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.866954][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.913236][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.933546][ T3508] bond0 (unregistering): Released all slaves [ 1245.941449][ T3508] bond1 (unregistering): Released all slaves [ 1246.002981][ T5885] hsr_slave_0: entered promiscuous mode [ 1246.042435][ T5885] hsr_slave_1: entered promiscuous mode [ 1246.070064][ T5885] debugfs: 'hsr0' already exists in 'hsr' [ 1246.086725][ T5885] Cannot create hsr debugfs directory [ 1246.214899][ T3508] hsr_slave_0: left promiscuous mode [ 1246.244261][ T3508] hsr_slave_1: left promiscuous mode [ 1246.274572][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.303743][ T28] kauditd_printk_skb: 186 callbacks suppressed [ 1246.303762][ T28] audit: type=1400 audit(2000000590.518:16496): avc: denied { read } for pid=6000 comm="syz.5.9664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1246.345044][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.415524][ T6006] netlink: 277 bytes leftover after parsing attributes in process `syz.5.9664'. [ 1246.426380][ T28] audit: type=1400 audit(2000000590.630:16497): avc: denied { create } for pid=6000 comm="syz.5.9664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1246.456656][T26499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.468331][ T28] audit: type=1400 audit(2000000590.658:16498): avc: denied { mounton } for pid=6000 comm="syz.5.9664" path="/211/file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1246.511486][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 1246.530904][ T28] audit: type=1400 audit(2000000590.723:16499): avc: denied { create } for pid=6007 comm="syz.6.9665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 1246.551696][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 1246.562145][ T28] audit: type=1400 audit(2000000590.723:16500): avc: denied { ioctl } for pid=6007 comm="syz.6.9665" path="socket:[109660]" dev="sockfs" ino=109660 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 1246.590320][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9665'. [ 1246.942917][ T28] audit: type=1400 audit(2000000591.097:16501): avc: denied { create } for pid=6007 comm="syz.6.9665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 1247.913923][ T28] audit: type=1400 audit(2000000591.967:16502): avc: denied { read } for pid=6030 comm="syz.6.9670" path="socket:[109723]" dev="sockfs" ino=109723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1248.174735][ T6025] FAULT_INJECTION: forcing a failure. [ 1248.174735][ T6025] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.193026][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: syz.0.9668 Tainted: G W syzkaller #0 PREEMPT(full) [ 1248.193080][ T6025] Tainted: [W]=WARN [ 1248.193089][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1248.193103][ T6025] Call Trace: [ 1248.193112][ T6025] [ 1248.193122][ T6025] __dump_stack+0x1d/0x30 [ 1248.193155][ T6025] dump_stack_lvl+0x95/0xd0 [ 1248.193251][ T6025] dump_stack+0x15/0x1b [ 1248.193278][ T6025] should_fail_ex+0x263/0x280 [ 1248.193309][ T6025] should_failslab+0x8c/0xb0 [ 1248.193330][ T6025] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 1248.193414][ T6025] ? __d_alloc+0x37/0x340 [ 1248.193444][ T6025] __d_alloc+0x37/0x340 [ 1248.193506][ T6025] ? __ns_ref_active_get+0x53/0xd0 [ 1248.193607][ T6025] d_alloc_anon+0x17/0x20 [ 1248.193633][ T6025] path_from_stashed+0x1cf/0x330 [ 1248.193733][ T6025] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1248.193762][ T6025] ns_get_path+0x62/0x80 [ 1248.193817][ T6025] proc_ns_get_link+0x80/0x160 [ 1248.193852][ T6025] pick_link+0x4b1/0x8e0 [ 1248.193879][ T6025] step_into_slowpath+0x36a/0x4c0 [ 1248.193970][ T6025] path_openat+0x15d0/0x2050 [ 1248.193995][ T6025] do_file_open+0x16c/0x290 [ 1248.194170][ T6025] do_sys_openat2+0x94/0x130 [ 1248.194200][ T6025] __x64_sys_openat+0xf2/0x120 [ 1248.194234][ T6025] x64_sys_call+0x1e39/0x3020 [ 1248.194277][ T6025] do_syscall_64+0x12c/0x370 [ 1248.194360][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.194387][ T6025] RIP: 0033:0x7f0cdbcad04e [ 1248.194407][ T6025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1248.194492][ T6025] RSP: 002b:00007f0cda73eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1248.194536][ T6025] RAX: ffffffffffffffda RBX: 00007f0cda73f6c0 RCX: 00007f0cdbcad04e [ 1248.194555][ T6025] RDX: 0000000000000002 RSI: 00007f0cda73ef90 RDI: ffffffffffffff9c [ 1248.194646][ T6025] RBP: 00007f0cda73f090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.194660][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1248.194674][ T6025] R13: 00007f0cdbf66038 R14: 00007f0cdbf65fa0 R15: 00007fff09998ca8 [ 1248.194694][ T6025] [ 1248.556861][ T6045] loop5: detected capacity change from 0 to 2048 [ 1248.564636][ T6031] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1248.661940][ T28] audit: type=1400 audit(2000000592.715:16503): avc: denied { setopt } for pid=6051 comm="syz.4.9675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1248.690497][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1248.701869][T22046] Alternate GPT is invalid, using primary GPT. [ 1248.704299][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1248.717478][T22046] loop5: p2 p3 p7 [ 1248.751068][ T28] audit: type=1400 audit(2000000592.725:16504): avc: denied { write } for pid=6051 comm="syz.4.9675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1248.793034][ T28] audit: type=1400 audit(2000000592.800:16505): avc: denied { read } for pid=6061 comm="syz.0.9676" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1248.820989][ T6053] loop6: detected capacity change from 0 to 512 [ 1248.880180][ T6045] Alternate GPT is invalid, using primary GPT. [ 1248.887179][ T6045] loop5: p2 p3 p7 [ 1248.972454][ T6053] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1249.020347][ T6053] EXT4-fs (loop6): 1 truncate cleaned up [ 1249.037711][ T6053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.290106][ T5885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1249.308494][ T5885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1249.328266][ T5885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1249.351875][ T5885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1249.450828][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.470438][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.481705][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.488918][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.517271][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.524446][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.554331][T26499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.607490][ T5885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1249.623346][ T5885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1249.669269][ T6127] ip6tnl1: entered promiscuous mode [ 1249.758005][ T6144] loop4: detected capacity change from 0 to 256 [ 1249.774191][ T6144] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1249.845748][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.880938][ T6150] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 1249.909476][ T6150] FAT-fs (loop4): Filesystem has been set read-only [ 1249.923180][ T6150] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 1249.947438][ T6152] loop5: detected capacity change from 0 to 512 [ 1250.028497][ T6152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1250.064616][ T6152] siw: device registration error -23 [ 1250.076275][ T6150] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 1250.091856][ T5885] veth0_vlan: entered promiscuous mode [ 1250.101481][ T5885] veth1_vlan: entered promiscuous mode [ 1250.120327][ T5885] veth0_macvtap: entered promiscuous mode [ 1250.130185][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.130531][ T5885] veth1_macvtap: entered promiscuous mode [ 1250.156137][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.176172][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.208683][ T9349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.225170][ T9349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.246690][ T9349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.279789][ T9349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.657043][ T6218] loop2: detected capacity change from 0 to 512 [ 1250.723047][ T6218] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1250.756745][ T6242] sg_write: data in/out 2268/14 bytes for SCSI command 0x0-- guessing data in; [ 1250.756745][ T6242] program syz.6.9692 not setting count and/or reply_len properly [ 1250.780278][ T6218] EXT4-fs (loop2): 1 truncate cleaned up [ 1250.808680][ T6249] siw: device registration error -23 [ 1250.835830][ T6218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.998736][ T6266] siw: device registration error -23 [ 1251.023191][ T6275] loop6: detected capacity change from 0 to 512 [ 1251.054392][ T6231] loop4: detected capacity change from 0 to 2048 [ 1251.084540][ T6275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.104338][ T6275] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.116524][ T6275] EXT4-fs (loop6): shut down requested (2) [ 1251.137985][ T6275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 1251.146930][ T6275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 1251.156694][ T6275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 1251.168426][T17823] Alternate GPT is invalid, using primary GPT. [ 1251.179305][T26499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.192818][ T6286] loop5: detected capacity change from 0 to 1024 [ 1251.199630][T17823] loop4: p2 p3 p7 [ 1251.218873][ T6286] EXT4-fs: Ignoring removed bh option [ 1251.245501][ T6286] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1251.268669][ T6291] loop6: detected capacity change from 0 to 512 [ 1251.270561][ T6231] Alternate GPT is invalid, using primary GPT. [ 1251.287436][ T6286] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #3: block 1: comm syz.5.9700: lblock 1 mapped to illegal pblock 1 (length 1) [ 1251.289256][ T6231] loop4: p2 p3 p7 [ 1251.315814][ T6291] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1251.316544][ T6286] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1251.334646][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1251.336928][ T6286] EXT4-fs (loop5): Remounting filesystem read-only [ 1251.344851][ C1] EXT4-fs (loop5): initial error at time 2000000595: ext4_map_blocks:828: inode 3: block 1 [ 1251.372623][ C1] EXT4-fs (loop5): last error at time 2000000595: ext4_map_blocks:828: inode 3: block 1 [ 1251.395979][ T6286] EXT4-fs (loop5): 1 orphan inode deleted [ 1251.403220][ T6286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.405532][ T6291] EXT4-fs (loop6): 1 truncate cleaned up [ 1251.406246][ T6291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1251.432193][ T6291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.490164][ T5885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.745047][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.798442][ T6336] siw: device registration error -23 [ 1251.861163][ T6342] loop2: detected capacity change from 0 to 512 [ 1251.875512][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 1251.875528][ T28] audit: type=1400 audit(2000000595.727:16534): avc: denied { read } for pid=6344 comm="syz.0.9710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1251.904096][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1251.933873][ T6345] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1251.963843][ T6342] siw: device registration error -23 [ 1251.976239][ T28] audit: type=1400 audit(2000000595.821:16535): avc: denied { bind } for pid=6344 comm="syz.0.9710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1251.999352][ T6349] vlan0: entered allmulticast mode [ 1252.004517][ T6349] veth0_to_bond: entered allmulticast mode [ 1252.021704][ T28] audit: type=1400 audit(2000000595.821:16536): avc: denied { name_bind } for pid=6344 comm="syz.0.9710" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1252.025886][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9712'. [ 1252.052689][ T28] audit: type=1400 audit(2000000595.821:16537): avc: denied { node_bind } for pid=6344 comm="syz.0.9710" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1252.075914][ T28] audit: type=1400 audit(2000000595.905:16538): avc: denied { create } for pid=6360 comm="syz.6.9713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 1252.104019][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9713'. [ 1252.104020][ T28] audit: type=1400 audit(2000000595.933:16539): avc: denied { write } for pid=6360 comm="syz.6.9713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 1252.171097][ T5885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.324346][ T6380] FAULT_INJECTION: forcing a failure. [ 1252.324346][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.369660][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.5.9717 Tainted: G W syzkaller #0 PREEMPT(full) [ 1252.369698][ T6380] Tainted: [W]=WARN [ 1252.369708][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1252.369722][ T6380] Call Trace: [ 1252.369730][ T6380] [ 1252.369738][ T6380] __dump_stack+0x1d/0x30 [ 1252.369815][ T6380] dump_stack_lvl+0x95/0xd0 [ 1252.369920][ T6380] dump_stack+0x15/0x1b [ 1252.369944][ T6380] should_fail_ex+0x263/0x280 [ 1252.369975][ T6380] should_failslab+0x8c/0xb0 [ 1252.370059][ T6380] __kvmalloc_node_noprof+0x155/0x650 [ 1252.370090][ T6380] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 1252.370138][ T6380] bpf_test_run_xdp_live+0x17e/0x1360 [ 1252.370176][ T6380] ? mutex_unlock+0x59/0x90 [ 1252.370200][ T6380] ? 0xffffffffa0205240 [ 1252.370223][ T6380] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 1252.370261][ T6380] ? 0xffffffffa0205240 [ 1252.370287][ T6380] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1252.370314][ T6380] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1252.370399][ T6380] ? __rcu_read_unlock+0x4e/0x70 [ 1252.370461][ T6380] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1252.370544][ T6380] bpf_prog_test_run+0x204/0x340 [ 1252.370586][ T6380] __sys_bpf+0x52e/0x7e0 [ 1252.370615][ T6380] __x64_sys_bpf+0x41/0x50 [ 1252.370636][ T6380] x64_sys_call+0x10cb/0x3020 [ 1252.370665][ T6380] do_syscall_64+0x12c/0x370 [ 1252.370741][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.370763][ T6380] RIP: 0033:0x7f5e9ee9c819 [ 1252.370791][ T6380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.370871][ T6380] RSP: 002b:00007f5e9d8d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1252.370896][ T6380] RAX: ffffffffffffffda RBX: 00007f5e9f116090 RCX: 00007f5e9ee9c819 [ 1252.370913][ T6380] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1252.370929][ T6380] RBP: 00007f5e9d8d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.371016][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.371030][ T6380] R13: 00007f5e9f116128 R14: 00007f5e9f116090 R15: 00007ffc40499778 [ 1252.371051][ T6380] [ 1252.911978][ T28] audit: type=1400 audit(2000000596.700:16540): avc: denied { read } for pid=6394 comm="syz.5.9719" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1252.936720][ T28] audit: type=1400 audit(2000000596.700:16541): avc: denied { open } for pid=6394 comm="syz.5.9719" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1253.059434][ T28] audit: type=1400 audit(2000000596.840:16542): avc: denied { watch } for pid=6401 comm="syz.5.9722" path="/227" dev="tmpfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1253.100618][ T6402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1253.115516][ T6402] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1253.178454][ T6402] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9722: bg 0: block 112: padding at end of block bitmap is not set [ 1253.200401][ T6402] EXT4-fs (loop5): Remounting filesystem read-only [ 1253.238340][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1253.320045][ T28] audit: type=1400 audit(2000000597.074:16543): avc: denied { create } for pid=6408 comm="syz.0.9723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1253.418365][ T6419] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1253.441512][ T6409] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 1253.452515][ T6409] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 1253.531667][ T6424] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1253.579292][ T6424] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 1253.602860][ T6424] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.9728: inode #15: comm syz.4.9728: iget: illegal inode # [ 1253.628682][ T6424] loop4: lost filesystem error report for type 5 error -117 [ 1253.628841][ T6424] EXT4-fs (loop4): Remounting filesystem read-only [ 1253.636394][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1253.636424][ C0] EXT4-fs (loop4): initial error at time 2000000597: ext4_orphan_get:1397 [ 1253.636447][ C0] EXT4-fs (loop4): last error at time 2000000597: ext4_orphan_get:1397 [ 1254.675550][ T6424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.668794][ T6436] set_capacity_and_notify: 2 callbacks suppressed [ 1255.668813][ T6436] loop6: detected capacity change from 0 to 1024 [ 1255.741805][ T6436] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.9731: Failed to acquire dquot type 0 [ 1255.753616][ T6436] loop6: lost filesystem error report for type 5 error -5 [ 1255.761001][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1255.774665][ C1] EXT4-fs (loop6): initial error at time 2000000599: ext4_acquire_dquot:7026 [ 1255.783581][ C1] EXT4-fs (loop6): last error at time 2000000599: ext4_acquire_dquot:7026 [ 1256.492001][ T6436] EXT4-fs (loop6): 1 truncate cleaned up [ 1256.499709][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.515733][ T6436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.550989][ T6445] loop2: detected capacity change from 0 to 512 [ 1256.558636][ T6449] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1256.565188][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1256.577346][ T6445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1256.591167][ T6449] vhci_hcd vhci_hcd.0: Device attached [ 1256.604196][ T6445] siw: device registration error -23 [ 1256.640566][ T6458] loop4: detected capacity change from 0 to 512 [ 1256.661604][T26499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.777350][ T6458] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.9738: inode has both inline data and extents flags [ 1256.800613][ T5885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.819515][ T6458] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1256.830199][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1256.845891][ C1] EXT4-fs (loop4): initial error at time 2000000600: ext4_orphan_get:1397: inode 15 [ 1256.855353][ C1] EXT4-fs (loop4): last error at time 2000000600: ext4_orphan_get:1397: inode 15 [ 1256.913458][ T6458] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.9738: couldn't read orphan inode 15 (err -117) [ 1256.936631][ T6466] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9741'. [ 1257.777752][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 1257.777772][ T28] audit: type=1400 audit(2000000600.497:16662): avc: denied { create } for pid=6459 comm="syz.5.9741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1257.816966][ T9612] usb 1-1: new high-speed USB device number 4 using vhci_hcd [ 1257.824823][ T6451] vhci_hcd: connection closed [ 1258.637324][ T36] vhci_hcd vhci_hcd.0: stop threads [ 1258.674554][ T6458] loop4: lost filesystem error report for type 5 error -117 [ 1258.683152][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1258.913170][ T28] audit: type=1400 audit(2000000600.609:16663): avc: denied { sys_admin } for pid=6459 comm="syz.5.9741" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1258.938975][ T36] vhci_hcd vhci_hcd.0: release socket [ 1258.948775][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 1259.016432][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.036450][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.095733][ T6477] smc: net device bond0 applied user defined pnetid SYZ2 [ 1259.124668][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9744'. [ 1259.133942][ T28] audit: type=1400 audit(2000000602.508:16664): avc: denied { bind } for pid=6478 comm="syz.5.9744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1259.159438][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9744'. [ 1259.171834][ T28] audit: type=1400 audit(2000000602.508:16665): avc: denied { write } for pid=6478 comm="syz.5.9744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1259.211077][ T6482] FAULT_INJECTION: forcing a failure. [ 1259.211077][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.224031][ T6482] CPU: 1 UID: 0 PID: 6482 Comm: syz.5.9745 Tainted: G W syzkaller #0 PREEMPT(full) [ 1259.224070][ T6482] Tainted: [W]=WARN [ 1259.224081][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1259.224093][ T6482] Call Trace: [ 1259.224101][ T6482] [ 1259.224109][ T6482] __dump_stack+0x1d/0x30 [ 1259.224135][ T6482] dump_stack_lvl+0x95/0xd0 [ 1259.224163][ T6482] dump_stack+0x15/0x1b [ 1259.224190][ T6482] should_fail_ex+0x263/0x280 [ 1259.224265][ T6482] should_failslab+0x8c/0xb0 [ 1259.224290][ T6482] kmem_cache_alloc_noprof+0x66/0x400 [ 1259.224312][ T6482] ? security_inode_alloc+0x37/0x100 [ 1259.224384][ T6482] security_inode_alloc+0x37/0x100 [ 1259.224422][ T6482] inode_init_always_gfp+0x4b7/0x500 [ 1259.224453][ T6482] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1259.224564][ T6482] alloc_inode+0x58/0x170 [ 1259.224591][ T6482] new_inode+0x1d/0xe0 [ 1259.224671][ T6482] shmem_get_inode+0x246/0x750 [ 1259.224699][ T6482] __shmem_file_setup+0x112/0x210 [ 1259.224733][ T6482] shmem_file_setup+0x3b/0x50 [ 1259.224818][ T6482] memfd_alloc_file+0x4e/0x300 [ 1259.224856][ T6482] __se_sys_memfd_create+0x2e1/0x3b0 [ 1259.224956][ T6482] __x64_sys_memfd_create+0x31/0x40 [ 1259.225009][ T6482] x64_sys_call+0x1f22/0x3020 [ 1259.225113][ T6482] do_syscall_64+0x12c/0x370 [ 1259.225144][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.225197][ T6482] RIP: 0033:0x7f5e9ee9c819 [ 1259.225293][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.225315][ T6482] RSP: 002b:00007f5e9d8f6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1259.225382][ T6482] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007f5e9ee9c819 [ 1259.225464][ T6482] RDX: 00007f5e9d8f6ee0 RSI: 0000000000000000 RDI: 00007f5e9ef32e71 [ 1259.225481][ T6482] RBP: 0000200000000940 R08: 00000000ffffffff R09: 0000000000000000 [ 1259.225498][ T6482] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 1259.225514][ T6482] R13: 00007f5e9d8f6ee0 R14: 00007f5e9d8f6ea0 R15: 00002000000003c0 [ 1259.225535][ T6482] [ 1259.548398][ T6496] FAULT_INJECTION: forcing a failure. [ 1259.548398][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.561384][ T28] audit: type=1400 audit(2000000602.910:16666): avc: denied { connect } for pid=6497 comm="syz.0.9751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1259.573854][ T6498] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1259.588917][ T6496] CPU: 0 UID: 0 PID: 6496 Comm: syz.5.9750 Tainted: G W syzkaller #0 PREEMPT(full) [ 1259.588955][ T6496] Tainted: [W]=WARN [ 1259.588962][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1259.588975][ T6496] Call Trace: [ 1259.588981][ T6496] [ 1259.588990][ T6496] __dump_stack+0x1d/0x30 [ 1259.589072][ T6496] dump_stack_lvl+0x95/0xd0 [ 1259.589096][ T6496] dump_stack+0x15/0x1b [ 1259.589185][ T6496] should_fail_ex+0x263/0x280 [ 1259.589213][ T6496] should_failslab+0x8c/0xb0 [ 1259.589317][ T6496] __kvmalloc_node_noprof+0x155/0x650 [ 1259.589390][ T6496] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 1259.589426][ T6496] bpf_test_run_xdp_live+0x17e/0x1360 [ 1259.589471][ T6496] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1259.589498][ T6496] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1259.589543][ T6496] ? mutex_unlock+0x4e/0x90 [ 1259.589563][ T6496] ? 0xffffffffa0205240 [ 1259.589636][ T6496] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 1259.589724][ T6496] ? 0xffffffffa0205240 [ 1259.589755][ T6496] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1259.589851][ T6496] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1259.589885][ T6496] ? __rcu_read_unlock+0x4e/0x70 [ 1259.589976][ T6496] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1259.590008][ T6496] bpf_prog_test_run+0x204/0x340 [ 1259.590033][ T6496] __sys_bpf+0x52e/0x7e0 [ 1259.590061][ T6496] __x64_sys_bpf+0x41/0x50 [ 1259.590223][ T6496] x64_sys_call+0x10cb/0x3020 [ 1259.590250][ T6496] do_syscall_64+0x12c/0x370 [ 1259.590339][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.590420][ T6496] RIP: 0033:0x7f5e9ee9c819 [ 1259.590437][ T6496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.590528][ T6496] RSP: 002b:00007f5e9d8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1259.590551][ T6496] RAX: ffffffffffffffda RBX: 00007f5e9f115fa0 RCX: 00007f5e9ee9c819 [ 1259.590566][ T6496] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1259.590651][ T6496] RBP: 00007f5e9d8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.590718][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.590732][ T6496] R13: 00007f5e9f116038 R14: 00007f5e9f115fa0 R15: 00007ffc40499778 [ 1259.590759][ T6496] [ 1259.632453][ T6502] netlink: 'syz.6.9752': attribute type 1 has an invalid length. [ 1259.830517][ T6502] netlink: 'syz.6.9752': attribute type 1 has an invalid length. [ 1259.831487][ T6498] bond1 (unregistering): Released all slaves [ 1259.845911][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.856986][ T6502] netlink: 'syz.6.9752': attribute type 1 has an invalid length. [ 1259.932234][ T6509] loop6: detected capacity change from 0 to 256 [ 1259.977212][ T6509] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1260.002250][ T6508] loop4: detected capacity change from 0 to 4096 [ 1260.010753][ T6516] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9758'. [ 1260.045237][ T28] audit: type=1400 audit(2000000603.359:16667): avc: denied { bind } for pid=6517 comm="syz.0.9759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1260.075564][ T6522] FAULT_INJECTION: forcing a failure. [ 1260.075564][ T6522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.085567][ T6523] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 1260.117366][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.0.9760 Tainted: G W syzkaller #0 PREEMPT(full) [ 1260.117406][ T6522] Tainted: [W]=WARN [ 1260.117415][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1260.117430][ T6522] Call Trace: [ 1260.117439][ T6522] [ 1260.117449][ T6522] __dump_stack+0x1d/0x30 [ 1260.117496][ T6522] dump_stack_lvl+0x95/0xd0 [ 1260.117561][ T6522] dump_stack+0x15/0x1b [ 1260.117588][ T6522] should_fail_ex+0x263/0x280 [ 1260.117621][ T6522] should_fail+0xb/0x20 [ 1260.117709][ T6522] should_fail_usercopy+0x1a/0x20 [ 1260.117736][ T6522] _copy_from_user+0x1c/0xb0 [ 1260.117815][ T6522] __sys_bind+0x106/0x290 [ 1260.117853][ T6522] __x64_sys_bind+0x3f/0x50 [ 1260.117956][ T6522] x64_sys_call+0x2b30/0x3020 [ 1260.117986][ T6522] do_syscall_64+0x12c/0x370 [ 1260.118075][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.118098][ T6522] RIP: 0033:0x7f0cdbcec819 [ 1260.118116][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.118169][ T6522] RSP: 002b:00007f0cda73f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1260.118201][ T6522] RAX: ffffffffffffffda RBX: 00007f0cdbf65fa0 RCX: 00007f0cdbcec819 [ 1260.118218][ T6522] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000003 [ 1260.118234][ T6522] RBP: 00007f0cda73f090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.118249][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.118264][ T6522] R13: 00007f0cdbf66038 R14: 00007f0cdbf65fa0 R15: 00007fff09998ca8 [ 1260.118346][ T6522] [ 1260.119618][ T6508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1260.263816][ T6523] FAT-fs (loop6): Filesystem has been set read-only [ 1260.263846][ T6523] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 1260.311888][ T28] audit: type=1400 audit(2000000603.593:16668): avc: denied { write open } for pid=6506 comm="syz.4.9753" path="/316/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1260.314560][ T6508] ipvlan0: entered promiscuous mode [ 1260.369299][ T28] audit: type=1400 audit(2000000603.593:16669): avc: denied { ioctl } for pid=6506 comm="syz.4.9753" path="/316/file1/bus" dev="loop4" ino=18 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1260.422780][ T28] audit: type=1326 audit(2000000603.714:16670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6506 comm="syz.4.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465c8dc819 code=0x7ffc0000 [ 1260.476445][ T28] audit: type=1326 audit(2000000603.714:16671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6506 comm="syz.4.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465c8dc819 code=0x7ffc0000 [ 1260.748047][ T6523] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 1260.808551][ T6506] ipvlan0: left promiscuous mode [ 1260.865927][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.972363][ T6545] FAULT_INJECTION: forcing a failure. [ 1260.972363][ T6545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.112159][ T6545] CPU: 0 UID: 0 PID: 6545 Comm: syz.6.9768 Tainted: G W syzkaller #0 PREEMPT(full) [ 1261.112195][ T6545] Tainted: [W]=WARN [ 1261.112202][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1261.112214][ T6545] Call Trace: [ 1261.112221][ T6545] [ 1261.112231][ T6545] __dump_stack+0x1d/0x30 [ 1261.112340][ T6545] dump_stack_lvl+0x95/0xd0 [ 1261.112368][ T6545] dump_stack+0x15/0x1b [ 1261.112398][ T6545] should_fail_ex+0x263/0x280 [ 1261.112432][ T6545] should_fail+0xb/0x20 [ 1261.112461][ T6545] should_fail_usercopy+0x1a/0x20 [ 1261.112528][ T6545] _copy_to_user+0x20/0xa0 [ 1261.112569][ T6545] simple_read_from_buffer+0xb5/0x130 [ 1261.112599][ T6545] proc_fail_nth_read+0x10e/0x150 [ 1261.112637][ T6545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1261.112739][ T6545] vfs_read+0x1ab/0x7f0 [ 1261.112757][ T6545] ? sock_common_getsockopt+0x60/0x70 [ 1261.112782][ T6545] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1261.112812][ T6545] ? do_sock_getsockopt+0x1c4/0x210 [ 1261.112881][ T6545] ksys_read+0xdc/0x1a0 [ 1261.112903][ T6545] __x64_sys_read+0x40/0x50 [ 1261.112975][ T6545] x64_sys_call+0x2886/0x3020 [ 1261.113005][ T6545] do_syscall_64+0x12c/0x370 [ 1261.113056][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.113083][ T6545] RIP: 0033:0x7f94aff5d04e [ 1261.113103][ T6545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1261.113126][ T6545] RSP: 002b:00007f94ae9f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1261.113152][ T6545] RAX: ffffffffffffffda RBX: 00007f94ae9f76c0 RCX: 00007f94aff5d04e [ 1261.113168][ T6545] RDX: 000000000000000f RSI: 00007f94ae9f70a0 RDI: 0000000000000004 [ 1261.113206][ T6545] RBP: 00007f94ae9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.113222][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.113238][ T6545] R13: 00007f94b0216038 R14: 00007f94b0215fa0 R15: 00007ffce10fac18 [ 1261.113261][ T6545] [ 1261.436775][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9773'. [ 1261.450808][ T6553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9772'. [ 1261.513898][ T6561] loop2: detected capacity change from 0 to 164 [ 1261.587409][ T6561] netlink: 'syz.2.9774': attribute type 1 has an invalid length. [ 1261.912708][ T6605] netlink: 'syz.0.9784': attribute type 1 has an invalid length. [ 1261.930535][ T6605] netlink: 'syz.0.9784': attribute type 1 has an invalid length. [ 1261.944028][ T6605] netlink: 'syz.0.9784': attribute type 1 has an invalid length. [ 1262.086943][ T6589] chnl_net:caif_netlink_parms(): no params data found [ 1262.105353][ T6582] loop5: detected capacity change from 0 to 2048 [ 1262.123920][ T6610] netlink: 'syz.0.9785': attribute type 13 has an invalid length. [ 1262.208869][ T6578] loop2: detected capacity change from 0 to 2048 [ 1262.218309][ T3300] Alternate GPT is invalid, using primary GPT. [ 1262.235221][ T3300] loop5: p2 p3 p7 [ 1262.270574][ T6582] Alternate GPT is invalid, using primary GPT. [ 1262.296505][T17823] Alternate GPT is invalid, using primary GPT. [ 1262.309846][ T6582] loop5: p2 p3 p7 [ 1262.319182][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.326450][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.342072][T17823] loop2: p2 p3 p7 [ 1262.421568][ T6578] Alternate GPT is invalid, using primary GPT. [ 1262.460879][ T6578] loop2: p2 p3 p7 [ 1262.532725][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.736700][ T9349] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.757201][ T9349] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.807006][ T9349] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.828818][ T9349] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.838536][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.845684][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.853486][ T6589] bridge_slave_0: entered allmulticast mode [ 1262.860050][ T6589] bridge_slave_0: entered promiscuous mode [ 1262.867817][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.905765][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.913188][ T6589] bridge_slave_1: entered allmulticast mode [ 1262.945960][ T6589] bridge_slave_1: entered promiscuous mode [ 1262.963288][ T6626] loop4: detected capacity change from 0 to 2048 [ 1263.002756][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.023150][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.045510][ T3300] Alternate GPT is invalid, using primary GPT. [ 1263.052124][ T3300] loop4: p2 p3 p7 [ 1263.092622][ T6589] team0: Port device team_slave_0 added [ 1263.109181][ T6626] Alternate GPT is invalid, using primary GPT. [ 1263.118034][ T6589] team0: Port device team_slave_1 added [ 1263.135993][ T6626] loop4: p2 p3 p7 [ 1263.152576][ T9349] team0: Port device netdevsim1 removed [ 1263.159798][ T28] kauditd_printk_skb: 232 callbacks suppressed [ 1263.181450][ T28] audit: type=1400 audit(2000000606.277:16904): avc: denied { mount } for pid=6648 comm="syz.0.9787" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1263.211756][ T6649] FAULT_INJECTION: forcing a failure. [ 1263.211756][ T6649] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.233164][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.268111][ T6649] CPU: 1 UID: 0 PID: 6649 Comm: syz.0.9787 Tainted: G W syzkaller #0 PREEMPT(full) [ 1263.268147][ T6649] Tainted: [W]=WARN [ 1263.268154][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1263.268169][ T6649] Call Trace: [ 1263.268177][ T6649] [ 1263.268220][ T6649] __dump_stack+0x1d/0x30 [ 1263.268373][ T6649] dump_stack_lvl+0x95/0xd0 [ 1263.268396][ T6649] dump_stack+0x15/0x1b [ 1263.268418][ T6649] should_fail_ex+0x263/0x280 [ 1263.268448][ T6649] should_failslab+0x8c/0xb0 [ 1263.268485][ T6649] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1263.268513][ T6649] ? __alloc_skb+0x2d6/0x690 [ 1263.268546][ T6649] __alloc_skb+0x2d6/0x690 [ 1263.268619][ T6649] ? __alloc_skb+0x200/0x690 [ 1263.268649][ T6649] netlink_alloc_large_skb+0xbf/0xf0 [ 1263.268679][ T6649] netlink_sendmsg+0x40c/0x6f0 [ 1263.268780][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.268868][ T6649] ____sys_sendmsg+0x563/0x5b0 [ 1263.268971][ T6649] ___sys_sendmsg+0x195/0x1e0 [ 1263.269006][ T6649] __x64_sys_sendmsg+0xd4/0x160 [ 1263.269035][ T6649] x64_sys_call+0x194c/0x3020 [ 1263.269064][ T6649] do_syscall_64+0x12c/0x370 [ 1263.269100][ T6649] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 1263.269129][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.269160][ T6649] RIP: 0033:0x7f0cdbcec819 [ 1263.269179][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.269243][ T6649] RSP: 002b:00007f0cda73f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.269266][ T6649] RAX: ffffffffffffffda RBX: 00007f0cdbf65fa0 RCX: 00007f0cdbcec819 [ 1263.269292][ T6649] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 1263.269309][ T6649] RBP: 00007f0cda73f090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.269326][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.269342][ T6649] R13: 00007f0cdbf66038 R14: 00007f0cdbf65fa0 R15: 00007fff09998ca8 [ 1263.269364][ T6649] [ 1263.478350][ T6657] loop5: detected capacity change from 0 to 512 [ 1263.487298][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.517771][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.529404][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.536489][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.566582][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.599707][ T6657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1263.667890][ T6665] netlink: 'syz.0.9791': attribute type 10 has an invalid length. [ 1263.678946][ T6589] hsr_slave_0: entered promiscuous mode [ 1263.685422][ T6589] hsr_slave_1: entered promiscuous mode [ 1263.691914][ T6589] debugfs: 'hsr0' already exists in 'hsr' [ 1263.692305][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.697760][ T6589] Cannot create hsr debugfs directory [ 1263.762568][ T28] audit: type=1400 audit(2000000606.847:16905): avc: denied { ioctl } for pid=6668 comm="syz.5.9793" path="socket:[111752]" dev="sockfs" ino=111752 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1263.922701][ T6673] netlink: 'syz.5.9794': attribute type 1 has an invalid length. [ 1264.007782][ T6675] loop5: detected capacity change from 0 to 512 [ 1264.128911][ T6675] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 1264.194647][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.222898][ T6665] bond0: (slave team0): Enslaving as an active interface with an up link [ 1264.410929][ T9612] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1264.502174][ T6679] loop5: detected capacity change from 0 to 2048 [ 1264.540478][ T6686] FAULT_INJECTION: forcing a failure. [ 1264.540478][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.561343][ T6682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6682 comm=syz.4.9797 [ 1264.599707][ T9349] bridge_slave_1: left allmulticast mode [ 1264.605654][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.0.9798 Tainted: G W syzkaller #0 PREEMPT(full) [ 1264.605742][ T6686] Tainted: [W]=WARN [ 1264.605750][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1264.605765][ T6686] Call Trace: [ 1264.605773][ T6686] [ 1264.605782][ T6686] __dump_stack+0x1d/0x30 [ 1264.605892][ T6686] dump_stack_lvl+0x95/0xd0 [ 1264.605962][ T6686] dump_stack+0x15/0x1b [ 1264.606016][ T6686] should_fail_ex+0x263/0x280 [ 1264.606046][ T6686] should_failslab+0x8c/0xb0 [ 1264.606182][ T6686] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1264.606205][ T6686] ? __alloc_skb+0x2d6/0x690 [ 1264.606245][ T6686] __alloc_skb+0x2d6/0x690 [ 1264.606285][ T6686] ? __alloc_skb+0x200/0x690 [ 1264.606318][ T6686] netlink_alloc_large_skb+0xbf/0xf0 [ 1264.606348][ T6686] netlink_sendmsg+0x40c/0x6f0 [ 1264.606368][ T6686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1264.606436][ T6686] ____sys_sendmsg+0x563/0x5b0 [ 1264.606463][ T6686] ___sys_sendmsg+0x195/0x1e0 [ 1264.606497][ T6686] __x64_sys_sendmsg+0xd4/0x160 [ 1264.606519][ T6686] x64_sys_call+0x194c/0x3020 [ 1264.606566][ T6686] do_syscall_64+0x12c/0x370 [ 1264.606656][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.606683][ T6686] RIP: 0033:0x7f0cdbcec819 [ 1264.606703][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.606722][ T6686] RSP: 002b:00007f0cda73f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.606868][ T6686] RAX: ffffffffffffffda RBX: 00007f0cdbf65fa0 RCX: 00007f0cdbcec819 [ 1264.606886][ T6686] RDX: 0000000024000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1264.606976][ T6686] RBP: 00007f0cda73f090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.607031][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.607099][ T6686] R13: 00007f0cdbf66038 R14: 00007f0cdbf65fa0 R15: 00007fff09998ca8 [ 1264.607119][ T6686] [ 1264.831111][ T6683] loop4: detected capacity change from 0 to 128 [ 1264.838805][ T6683] vfat: Unknown parameter '00000000000000000000000;MqbA4hj|ӭyf' [ 1264.850677][ T3300] Alternate GPT is invalid, using primary GPT. [ 1264.856947][ T3300] loop5: p2 p3 p7 [ 1264.896207][ T6679] Alternate GPT is invalid, using primary GPT. [ 1264.906138][ T9349] bridge_slave_1: left promiscuous mode [ 1264.912005][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.921611][ T6679] loop5: p2 p3 p7 [ 1264.962414][ T2999] Alternate GPT is invalid, using primary GPT. [ 1264.969432][ T2999] loop5: p2 p3 p7 [ 1265.011050][T23283] udevd[23283]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1265.023751][T17823] udevd[17823]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1265.038974][T22046] udevd[22046]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1265.072077][T17823] udevd[17823]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1265.083160][T22046] udevd[22046]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1265.099093][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1265.152746][ T6702] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9800'. [ 1265.183118][T17823] udevd[17823]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1265.194846][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1265.206185][T22046] udevd[22046]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1265.223916][ T6704] FAULT_INJECTION: forcing a failure. [ 1265.223916][ T6704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.259240][ T6704] CPU: 0 UID: 0 PID: 6704 Comm: syz.0.9801 Tainted: G W syzkaller #0 PREEMPT(full) [ 1265.259358][ T6704] Tainted: [W]=WARN [ 1265.259366][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1265.259381][ T6704] Call Trace: [ 1265.259390][ T6704] [ 1265.259400][ T6704] __dump_stack+0x1d/0x30 [ 1265.259430][ T6704] dump_stack_lvl+0x95/0xd0 [ 1265.259465][ T6704] dump_stack+0x15/0x1b [ 1265.259488][ T6704] should_fail_ex+0x263/0x280 [ 1265.259521][ T6704] should_fail+0xb/0x20 [ 1265.259550][ T6704] should_fail_usercopy+0x1a/0x20 [ 1265.259638][ T6704] _copy_from_user+0x1c/0xb0 [ 1265.259728][ T6704] do_sys_poll+0x137/0xc10 [ 1265.259752][ T6704] ? avc_has_perm+0x101/0x190 [ 1265.259841][ T6704] ? selinux_file_open+0x2e6/0x330 [ 1265.259898][ T6704] ? timespec64_add_safe+0x106/0x150 [ 1265.259926][ T6704] __x64_sys_poll+0x12c/0x230 [ 1265.260017][ T6704] x64_sys_call+0x2891/0x3020 [ 1265.260045][ T6704] do_syscall_64+0x12c/0x370 [ 1265.260076][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.260098][ T6704] RIP: 0033:0x7f0cdbcec819 [ 1265.260131][ T6704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.260154][ T6704] RSP: 002b:00007f0cda73f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1265.260185][ T6704] RAX: ffffffffffffffda RBX: 00007f0cdbf65fa0 RCX: 00007f0cdbcec819 [ 1265.260203][ T6704] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 1265.260220][ T6704] RBP: 00007f0cda73f090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.260267][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.260279][ T6704] R13: 00007f0cdbf66038 R14: 00007f0cdbf65fa0 R15: 00007fff09998ca8 [ 1265.260298][ T6704] [ 1265.481844][ T36] Bluetooth: hci0: Frame reassembly failed (-90) [ 1265.494641][ T9349] bridge_slave_0: left allmulticast mode [ 1265.494978][ T6711] FAULT_INJECTION: forcing a failure. [ 1265.494978][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.500357][ T9349] bridge_slave_0: left promiscuous mode [ 1265.513416][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.2.9803 Tainted: G W syzkaller #0 PREEMPT(full) [ 1265.513524][ T6711] Tainted: [W]=WARN [ 1265.513531][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1265.513544][ T6711] Call Trace: [ 1265.513552][ T6711] [ 1265.513561][ T6711] __dump_stack+0x1d/0x30 [ 1265.513645][ T6711] dump_stack_lvl+0x95/0xd0 [ 1265.513670][ T6711] dump_stack+0x15/0x1b [ 1265.513692][ T6711] should_fail_ex+0x263/0x280 [ 1265.513776][ T6711] should_failslab+0x8c/0xb0 [ 1265.513799][ T6711] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1265.513825][ T6711] ? __alloc_skb+0x2d6/0x690 [ 1265.513855][ T6711] __alloc_skb+0x2d6/0x690 [ 1265.513903][ T6711] ? __alloc_skb+0x200/0x690 [ 1265.513940][ T6711] netlink_alloc_large_skb+0xbf/0xf0 [ 1265.513977][ T6711] netlink_sendmsg+0x40c/0x6f0 [ 1265.514034][ T6711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.514055][ T6711] ____sys_sendmsg+0x563/0x5b0 [ 1265.514078][ T6711] ___sys_sendmsg+0x195/0x1e0 [ 1265.514173][ T6711] __x64_sys_sendmsg+0xd4/0x160 [ 1265.514222][ T6711] x64_sys_call+0x194c/0x3020 [ 1265.514295][ T6711] do_syscall_64+0x12c/0x370 [ 1265.514324][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.514407][ T6711] RIP: 0033:0x7f338e3ec819 [ 1265.514425][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.514445][ T6711] RSP: 002b:00007f338ce3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.514467][ T6711] RAX: ffffffffffffffda RBX: 00007f338e665fa0 RCX: 00007f338e3ec819 [ 1265.514482][ T6711] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1265.514555][ T6711] RBP: 00007f338ce3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.514570][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.514583][ T6711] R13: 00007f338e666038 R14: 00007f338e665fa0 R15: 00007ffc19a0e158 [ 1265.514603][ T6711] [ 1265.549354][ T6713] validate_nla: 2 callbacks suppressed [ 1265.549371][ T6713] netlink: 'syz.2.9804': attribute type 1 has an invalid length. [ 1265.555458][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.559607][ T6713] netlink: 'syz.2.9804': attribute type 1 has an invalid length. [ 1265.741199][ T6713] netlink: 'syz.2.9804': attribute type 1 has an invalid length. [ 1265.784114][ T28] audit: type=1326 audit(2000000608.737:16906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.9807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1265.808312][ T28] audit: type=1326 audit(2000000608.746:16907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.9807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1265.837192][ T28] audit: type=1326 audit(2000000608.746:16908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.9807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1265.861012][ T28] audit: type=1326 audit(2000000608.746:16909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.9807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1265.885370][ T28] audit: type=1326 audit(2000000608.746:16910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.9807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1265.909376][ T28] audit: type=1326 audit(2000000608.746:16911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.9807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1265.933346][ T28] audit: type=1326 audit(2000000608.746:16912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.9807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1265.965399][ T28] audit: type=1326 audit(2000000608.746:16913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.9807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cdbcec819 code=0x7ffc0000 [ 1266.058779][ T9349] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1266.066997][ T9349] bond0 (unregistering): Released all slaves [ 1266.137311][ T9349] hsr_slave_0: left promiscuous mode [ 1266.151997][ T9349] hsr_slave_1: left promiscuous mode [ 1266.164187][ T9349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.171991][ T9349] batman_adv: batadv0: Removing interface: dummy0 [ 1266.330094][ T9349] team0 (unregistering): Port device team_slave_1 removed [ 1266.351057][ T9349] team0 (unregistering): Port device team_slave_0 removed [ 1266.390173][ T6734] macvlan0: entered promiscuous mode [ 1266.446803][ T6752] netlink: 'syz.2.9812': attribute type 6 has an invalid length. [ 1266.483741][ T6756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9813'. [ 1266.562996][ T6763] netlink: 'syz.2.9815': attribute type 1 has an invalid length. [ 1266.585628][ T6763] netlink: 'syz.2.9815': attribute type 1 has an invalid length. [ 1266.608897][ T6763] netlink: 'syz.2.9815': attribute type 1 has an invalid length. [ 1266.700866][ T6589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1266.726436][ T6589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1266.746886][ T9349] IPVS: stop unused estimator thread 0... [ 1266.753049][ T6589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1266.778232][ T6589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1266.926328][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.957566][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.076118][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.083434][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.106836][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.113980][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.142593][ T6589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1267.167286][ T6589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1267.185068][ T6806] loop4: detected capacity change from 0 to 512 [ 1267.197508][ T6806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1267.230823][ T6806] EXT4-fs (loop4): 1 truncate cleaned up [ 1267.237530][ T6806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.425971][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1267.554471][T32307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.686244][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.707425][ T6824] loop5: detected capacity change from 0 to 512 [ 1267.734950][ T6824] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1267.763612][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9824'. [ 1267.778047][ T6824] EXT4-fs (loop5): 1 truncate cleaned up [ 1267.820549][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9825'. [ 1267.840933][ T6850] 8021q: VLANs not supported on sit0 [ 1267.855774][ T6824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1268.012247][ T6589] veth0_vlan: entered promiscuous mode [ 1268.038297][ T6589] veth1_vlan: entered promiscuous mode [ 1268.061969][ T6589] veth0_macvtap: entered promiscuous mode [ 1268.069910][ T6589] veth1_macvtap: entered promiscuous mode [ 1268.081971][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.095519][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.107647][ T4567] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.153757][ T4567] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.183962][ T4567] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.202562][ T4567] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.426780][ T2109] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.501376][ T6879] loop6: detected capacity change from 0 to 1024 [ 1268.514815][ T6879] EXT4-fs: Ignoring removed mblk_io_submit option [ 1268.536213][ T6873] loop2: detected capacity change from 0 to 2048 [ 1268.592115][ T6879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1268.611617][ T6879] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.638330][T17823] Alternate GPT is invalid, using primary GPT. [ 1268.645560][T17823] loop2: p2 p3 p7 [ 1268.682812][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 1268.682829][ T28] audit: type=1400 audit(2000000611.449:16957): avc: denied { append } for pid=6878 comm="syz.6.9780" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1268.684263][ T6873] Alternate GPT is invalid, using primary GPT. [ 1268.722929][ T6873] loop2: p2 p3 p7 [ 1269.280688][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1269.293221][ T6905] FAULT_INJECTION: forcing a failure. [ 1269.293221][ T6905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.306413][ T6905] CPU: 0 UID: 0 PID: 6905 Comm: syz.4.9834 Tainted: G W syzkaller #0 PREEMPT(full) [ 1269.306517][ T6905] Tainted: [W]=WARN [ 1269.306524][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1269.306536][ T6905] Call Trace: [ 1269.306543][ T6905] [ 1269.306551][ T6905] __dump_stack+0x1d/0x30 [ 1269.306605][ T6905] dump_stack_lvl+0x95/0xd0 [ 1269.306697][ T6905] dump_stack+0x15/0x1b [ 1269.306719][ T6905] should_fail_ex+0x263/0x280 [ 1269.306749][ T6905] should_fail+0xb/0x20 [ 1269.306775][ T6905] should_fail_usercopy+0x1a/0x20 [ 1269.306861][ T6905] strncpy_from_user+0x27/0x250 [ 1269.306881][ T6905] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 1269.306907][ T6905] do_getname+0x59/0x1c0 [ 1269.306956][ T6905] __se_sys_mkdir+0x1e/0xf0 [ 1269.307003][ T6905] __x64_sys_mkdir+0x31/0x40 [ 1269.307024][ T6905] x64_sys_call+0x2eab/0x3020 [ 1269.307052][ T6905] do_syscall_64+0x12c/0x370 [ 1269.307161][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.307187][ T6905] RIP: 0033:0x7f465c8dc819 [ 1269.307205][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.307226][ T6905] RSP: 002b:00007f465b32f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1269.307256][ T6905] RAX: ffffffffffffffda RBX: 00007f465cb55fa0 RCX: 00007f465c8dc819 [ 1269.307272][ T6905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1269.307355][ T6905] RBP: 00007f465b32f090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.307371][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.307385][ T6905] R13: 00007f465cb56038 R14: 00007f465cb55fa0 R15: 00007fffd14ac568 [ 1269.307406][ T6905] [ 1269.588318][ T28] audit: type=1400 audit(2000000612.281:16958): avc: denied { mount } for pid=6912 comm="syz.4.9838" name="/" dev="ramfs" ino=112552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1269.638710][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9840'. [ 1269.659062][ T28] audit: type=1400 audit(2000000612.281:16959): avc: denied { connect } for pid=6912 comm="syz.4.9838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1269.688803][ T28] audit: type=1400 audit(2000000612.281:16960): avc: denied { write } for pid=6912 comm="syz.4.9838" path="socket:[112553]" dev="sockfs" ino=112553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1269.915248][ T28] audit: type=1400 audit(2000000612.599:16961): avc: denied { write } for pid=6934 comm="syz.0.9846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1269.937073][ T28] audit: type=1400 audit(2000000612.618:16962): avc: denied { read } for pid=6934 comm="syz.0.9846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1270.141773][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9851'. [ 1270.166459][ T6911] loop6: detected capacity change from 0 to 2048 [ 1270.207436][ T28] audit: type=1400 audit(2000000612.880:16963): avc: denied { accept } for pid=6951 comm="syz.0.9851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1270.231488][ T3300] Alternate GPT is invalid, using primary GPT. [ 1270.237829][ T3300] loop6: p2 p3 p7 [ 1270.285165][ T6911] Alternate GPT is invalid, using primary GPT. [ 1270.293758][ T6911] loop6: p2 p3 p7 [ 1270.333482][ T2999] Alternate GPT is invalid, using primary GPT. [ 1270.340333][ T2999] loop6: p2 p3 p7 [ 1270.489307][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9855'. [ 1270.605090][ T28] audit: type=1400 audit(2000000613.245:16964): avc: denied { create } for pid=6970 comm="syz.2.9859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1270.643361][ T28] audit: type=1400 audit(2000000613.273:16965): avc: denied { bind } for pid=6970 comm="syz.2.9859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1270.668521][ T28] audit: type=1400 audit(2000000613.273:16966): avc: denied { setopt } for pid=6970 comm="syz.2.9859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1270.677052][ T6975] FAULT_INJECTION: forcing a failure. [ 1270.677052][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.702613][ T6975] CPU: 0 UID: 0 PID: 6975 Comm: syz.4.9860 Tainted: G W syzkaller #0 PREEMPT(full) [ 1270.702652][ T6975] Tainted: [W]=WARN [ 1270.702661][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1270.702676][ T6975] Call Trace: [ 1270.702683][ T6975] [ 1270.702692][ T6975] __dump_stack+0x1d/0x30 [ 1270.702725][ T6975] dump_stack_lvl+0x95/0xd0 [ 1270.702823][ T6975] dump_stack+0x15/0x1b [ 1270.702849][ T6975] should_fail_ex+0x263/0x280 [ 1270.702877][ T6975] should_failslab+0x8c/0xb0 [ 1270.702907][ T6975] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1270.702946][ T6975] ? __alloc_skb+0x2d6/0x690 [ 1270.702974][ T6975] __alloc_skb+0x2d6/0x690 [ 1270.703082][ T6975] ? __alloc_skb+0x200/0x690 [ 1270.703113][ T6975] netlink_alloc_large_skb+0xbf/0xf0 [ 1270.703144][ T6975] netlink_sendmsg+0x40c/0x6f0 [ 1270.703165][ T6975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.703220][ T6975] ____sys_sendmsg+0x563/0x5b0 [ 1270.703241][ T6975] ___sys_sendmsg+0x195/0x1e0 [ 1270.703268][ T6975] __x64_sys_sendmsg+0xd4/0x160 [ 1270.703295][ T6975] x64_sys_call+0x194c/0x3020 [ 1270.703331][ T6975] do_syscall_64+0x12c/0x370 [ 1270.703362][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.703389][ T6975] RIP: 0033:0x7f465c8dc819 [ 1270.703435][ T6975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.703454][ T6975] RSP: 002b:00007f465b32f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.703478][ T6975] RAX: ffffffffffffffda RBX: 00007f465cb55fa0 RCX: 00007f465c8dc819 [ 1270.703503][ T6975] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1270.703578][ T6975] RBP: 00007f465b32f090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.703594][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.703610][ T6975] R13: 00007f465cb56038 R14: 00007f465cb55fa0 R15: 00007fffd14ac568 [ 1270.703633][ T6975] [ 1270.990014][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9866'. [ 1271.239614][ T7006] ================================================================== [ 1271.247965][ T7006] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 1271.255277][ T7006] [ 1271.257610][ T7006] write to 0xffff888149f64000 of 8 bytes by task 7007 on cpu 1: [ 1271.265433][ T7006] mas_wmb_replace+0x13ce/0x1610 [ 1271.270393][ T7006] mas_wr_store_entry+0x16b6/0x2ed0 [ 1271.275607][ T7006] mas_store_prealloc+0x72e/0xa70 [ 1271.280743][ T7006] mmap_region+0x1b3b/0x2050 [ 1271.285344][ T7006] do_mmap+0x9b2/0xbd0 [ 1271.289439][ T7006] vm_mmap_pgoff+0x183/0x2d0 [ 1271.294063][ T7006] ksys_mmap_pgoff+0xc1/0x310 [ 1271.298758][ T7006] x64_sys_call+0x14df/0x3020 [ 1271.303450][ T7006] do_syscall_64+0x12c/0x370 [ 1271.308051][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.313956][ T7006] [ 1271.316289][ T7006] read to 0xffff888149f64000 of 8 bytes by task 7006 on cpu 0: [ 1271.323835][ T7006] mas_state_walk+0x485/0x650 [ 1271.328528][ T7006] mas_walk+0x60/0x150 [ 1271.332628][ T7006] lock_vma_under_rcu+0xc9/0x210 [ 1271.337607][ T7006] do_user_addr_fault+0x232/0x1050 [ 1271.342759][ T7006] exc_page_fault+0x62/0xa0 [ 1271.347282][ T7006] asm_exc_page_fault+0x26/0x30 [ 1271.352151][ T7006] [ 1271.354481][ T7006] value changed: 0xffff888120257d0e -> 0xffff888149f64000 [ 1271.361611][ T7006] [ 1271.364032][ T7006] Reported by Kernel Concurrency Sanitizer on: [ 1271.370359][ T7006] CPU: 0 UID: 0 PID: 7006 Comm: syz.0.9874 Tainted: G W syzkaller #0 PREEMPT(full) [ 1271.381218][ T7006] Tainted: [W]=WARN [ 1271.385027][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1271.395175][ T7006] ==================================================================